CVE-2024-21182

criticalknown exploitedpublic exploitcovered by 1 sourcefirst seen 2026-06-01

Actively exploited. CVE-2024-21182 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2026-06-01) — exploitation has been observed in the wild, and US federal agencies are required to remediate it under BOD 22-01. Treat patching as urgent.

Public exploit code is available. Proof-of-concept or working exploit code for CVE-2024-21182 is indexed in GitHub PoC. Expect opportunistic scanning and exploitation attempts — prioritize remediation.

Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.

CSIRTS triage

What: The unspecified vulnerability could allow an unauthenticated attacker to compromise Oracle WebLogic Server.
Who is affected: Users of Oracle WebLogic Server with network access via T3 or IIOP.
Urgency: Remediation is urgent due to active exploitation and the potential for unauthorized access to critical data.
Action: Apply the latest security patches from Oracle to mitigate the vulnerability.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2024-21182

Get an email if CVE-2024-21182 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Exploitation confirmedAlready exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 99% of all EPSS-scored CVEs.

Exploit availability

Public exploit or proof-of-concept code for CVE-2024-21182 is indexed in these free datasets. Available exploit code raises real-world risk independent of the CVSS score.

GitHub PoCPublic proof-of-concept repositories on GitHub reference this CVE.look it up ↗

Advisory coverage (1)

criticalexploitedCVE-2024-21182: Oracle WebLogic Server Unspecified Vulnerabilitycisa-kev · 2026-06-01

External references

NVD record for CVE-2024-21182

CVE.org record

CISA KEV catalog

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2024-21182 status](https://www.csirts.com/badge/CVE-2024-21182)](https://www.csirts.com/cve/CVE-2024-21182)