SecurityWeekEduard Kovacs
CISA Alerts to Active Exploits of Unpatched Oracle WebLogic Flaw
CISA has issued a warning about the exploitation of an Oracle WebLogic vulnerability, identified as CVE-2024-21182, which was patched nearly two years ago. The flaw allows remote, unauthenticated hackers to gain unauthorized access to critical data on vulnerable Oracle WebLogic Server instances. CISA added this vulnerability to its Known Exploited Vulnerabilities (KEV) catalog on June 1, instructing federal agencies to patch it by June 4. Proof-of-concept exploits have been made public, but no specific attack details have been reported.
Story timeline CVE-2024-21182
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 1 Jun · 18:41 UTC | CISA | CISA flags Oracle WebLogic CVE-2024-21182 as actively exploited |
| Mon 1 Jun · 20:24 UTC | CISA | CISA Puts Oracle WebLogic Flaw CVE‑2024‑21182 on KEV List |
| Tue 2 Jun · 02:21 UTC | CISA | CISA’s KEV Catalog Helps Firms Tackle Oracle WebLogic Risk |
| Tue 2 Jun · 05:21 UTC | SecurityOnline | The Shai-Hulud Infiltration: Red Hat Exploited in Sovereign Supply Chain Breach |
| Tue 2 Jun · 07:32 UTC | SecurityOnline | Grandoreiro Banking Trojan Evades Defense via Lookalike Software |
| Tue 2 Jun · 10:32 UTC | SecurityOnline | CVE-2024-21182 Fuels SilentCryptoMiner Attack on Streaming Sites |
| Tue 2 Jun · 12:21 UTC | SecurityWeek | CISA Alerts to Active Exploits of Unpatched Oracle WebLogic Flaw (this article) |
| Tue 2 Jun · 16:32 UTC | Security Affairs | CISA adds Oracle WebLogic flaw CVE-2024-21182 to exploited list |
| Tue 2 Jun · 19:00 UTC | The Hacker News | Oracle WebLogic CVE-2024-21182 added to KEV amid active exploits |