Security AffairsPierluigi Paganini
CISA adds Oracle WebLogic flaw CVE-2024-21182 to exploited list
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new vulnerability in Oracle WebLogic Server, identified as CVE-2024-21182, to its Known Exploited Vulnerabilities catalog. This flaw, which has a CVSS score of 7.5, allows unauthenticated remote attackers to access sensitive information and potentially gain full control over affected servers. CISA mandates that federal agencies address this vulnerability by June 4, 2026, and urges private organizations to do the same. This addition highlights ongoing concerns over security risks within web infrastructure.
Story timeline CVE-2024-21182
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 1 Jun · 18:41 UTC | CISA | CISA flags Oracle WebLogic CVE-2024-21182 as actively exploited |
| Mon 1 Jun · 20:24 UTC | CISA | CISA Puts Oracle WebLogic Flaw CVE‑2024‑21182 on KEV List |
| Tue 2 Jun · 02:21 UTC | CISA | CISA’s KEV Catalog Helps Firms Tackle Oracle WebLogic Risk |
| Tue 2 Jun · 05:21 UTC | SecurityOnline | The Shai-Hulud Infiltration: Red Hat Exploited in Sovereign Supply Chain Breach |
| Tue 2 Jun · 07:32 UTC | SecurityOnline | Grandoreiro Banking Trojan Evades Defense via Lookalike Software |
| Tue 2 Jun · 10:32 UTC | SecurityOnline | CVE-2024-21182 Fuels SilentCryptoMiner Attack on Streaming Sites |
| Tue 2 Jun · 12:21 UTC | SecurityWeek | CISA Alerts to Active Exploits of Unpatched Oracle WebLogic Flaw |
| Tue 2 Jun · 16:32 UTC | Security Affairs | CISA adds Oracle WebLogic flaw CVE-2024-21182 to exploited list (this article) |
| Tue 2 Jun · 19:00 UTC | The Hacker News | Oracle WebLogic CVE-2024-21182 added to KEV amid active exploits |