CISA adds Oracle WebLogic flaw CVE-2024-21182 to exploited list

THE U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new vulnerability in Oracle WebLogic Server, identified as CVE-2024-21182, to its Known Exploited Vulnerabilities catalog. This flaw, which has a CVSS score of 7.5, allows unauthenticated remote attackers to access sensitive information and potentially gain full control over affected servers. CISA mandates that federal agencies address this vulnerability by June 4, 2026, and urges private organizations to do the same. This addition highlights ongoing concerns over security risks within web infrastructure.