CVE-2024-21182: Oracle WebLogic Server Unspecified Vulnerability
Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.
Other sources
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle WebLogic Server (Oracle Fusion Middleware - Core)to a version that resolves this vulnerability.Fixed in 12.2.1.4.0 - Upgrade
Upgrade
Oracle WebLogic Server (Oracle Fusion Middleware - Core)to a version that resolves this vulnerability.Fixed in 14.1.1.0.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21182?
CVE-2024-21182 is classified as an easily exploitable vulnerability that poses a significant risk to affected systems.
How do I fix CVE-2024-21182?
To fix CVE-2024-21182, you should apply the latest security patches provided by Oracle for affected versions of WebLogic Server.
What versions are affected by CVE-2024-21182?
CVE-2024-21182 affects Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0.
Can CVE-2024-21182 be exploited remotely?
Yes, CVE-2024-21182 allows an unauthenticated attacker with network access via T3 or IIOP to exploit the vulnerability.
What components of Oracle Fusion Middleware does CVE-2024-21182 impact?
CVE-2024-21182 specifically impacts the Core component of the Oracle WebLogic Server in Oracle Fusion Middleware.