Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation

CISA added CVE-2024-21182, a high-severity Oracle WebLogic vulnerability enabling unauthenticated remote access, to its Known Exploited Vulnerabilities catalog following active exploitation.

• •The flaw (CVSS 7.5) was patched in July 2024 and allows unauthorized access via T3 and IIOP protocols
• •Previous WebLogic vulnerabilities were exploited for botnets, cryptocurrency mining, and ransomware
• •Federal agencies must patch systems by June 4, 2026
• •Current exploitation methods remain unknown

This summary was automatically generated by AI based on the original article and may not be fully accurate.