{"schema_version":"1","data":[{"id":3683,"advisory_id":"09375e4c-6d49-4023-8d61-0b8d45c1c25d","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-14883","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:39:37.576689+00:00","extraction_method":"structured","technologies":["core-kev","weblogic-server"],"cve_ids":["CVE-2020-14883"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle WebLogic Server Unspecified Vulnerability","summary":"Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and availability. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-14883","products":[{"name":{"value":"WebLogic Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-14883","aliases":["CVE-2020-14883"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2020-14883","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-14883","dueDate":"2022-05-03","product":"WebLogic Server","dateAdded":"2021-11-03","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and availability.","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-14883","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3682,"advisory_id":"abde3377-1037-4ecd-8259-314db1623a5e","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-14882","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:39:36.744024+00:00","extraction_method":"structured","technologies":["core-kev","weblogic-server"],"cve_ids":["CVE-2020-14882"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle WebLogic Server Remote Code Execution Vulnerability","summary":"Oracle WebLogic Server contains an unspecified vulnerability, which is assessed to allow for remote code execution, based on this vulnerability being related to CVE-2020-14750. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-14882","products":[{"name":{"value":"WebLogic Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-14882","aliases":["CVE-2020-14882"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2020-14882","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-14882","dueDate":"2022-05-03","product":"WebLogic Server","dateAdded":"2021-11-03","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Oracle WebLogic Server contains an unspecified vulnerability, which is assessed to allow for remote code execution, based on this vulnerability being related to CVE-2020-14750.","vulnerabilityName":"Oracle WebLogic Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-14882","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3680,"advisory_id":"dc0dc5e2-6bb0-4fbf-9fe4-a91aa4aa9bfb","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-14750","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:39:35.428374+00:00","extraction_method":"structured","technologies":["core-kev","weblogic-server"],"cve_ids":["CVE-2020-14750"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle WebLogic Server Remote Code Execution Vulnerability","summary":"Oracle WebLogic Server contains an unspecified vulnerability allowing an unauthenticated attacker to perform remote code execution. This vulnerability is related to CVE-2020-14882. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-14750","products":[{"name":{"value":"WebLogic Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-14750","aliases":["CVE-2020-14750"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2020-14750","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-14750","dueDate":"2022-05-03","product":"WebLogic Server","dateAdded":"2021-11-03","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Oracle WebLogic Server contains an unspecified vulnerability allowing an unauthenticated attacker to perform remote code execution. This vulnerability is related to CVE-2020-14882.","vulnerabilityName":"Oracle WebLogic Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-14750","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3679,"advisory_id":"a9066a9c-5fdd-4bb5-96cf-9700c8c708d8","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4852","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:39:34.585072+00:00","extraction_method":"structured","technologies":["core-kev","weblogic-server"],"cve_ids":["CVE-2015-4852"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability","summary":"Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-4852","products":[{"name":{"value":"WebLogic Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-4852","aliases":["CVE-2015-4852"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2015-4852","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-4852","dueDate":"2022-05-03","product":"WebLogic Server","dateAdded":"2021-11-03","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution.","vulnerabilityName":"Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-4852","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2936,"advisory_id":"5cba300b-9b51-4011-8304-ec4d8293987f","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-2725","source_published_at":"2022-01-10T00:00:00+00:00","published_at":"2026-10-24T21:26:37.145333+00:00","extraction_method":"structured","technologies":["core-kev","weblogic-server"],"cve_ids":["CVE-2019-2725"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle WebLogic Server, Injection","summary":"Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-2725","products":[{"name":{"value":"WebLogic Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-2725","aliases":["CVE-2019-2725"],"affected":[],"modified":"2022-01-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-74"],"cveID":"CVE-2019-2725","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-2725","dueDate":"2022-07-10","product":"WebLogic Server","dateAdded":"2022-01-10","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).","vulnerabilityName":"Oracle WebLogic Server, Injection","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-2725","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2894,"advisory_id":"71fbf808-cf52-4d84-a90a-d24f010df52e","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-10271","source_published_at":"2022-02-10T00:00:00+00:00","published_at":"2026-10-24T21:26:13.192264+00:00","extraction_method":"structured","technologies":["core-kev","weblogic-server"],"cve_ids":["CVE-2017-10271"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Corporation WebLogic Server Remote Code Execution Vulnerability","summary":"Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2017-10271","products":[{"name":{"value":"WebLogic Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-10271","aliases":["CVE-2017-10271"],"affected":[],"modified":"2022-02-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2017-10271","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-10271","dueDate":"2022-08-10","product":"WebLogic Server","dateAdded":"2022-02-10","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.","vulnerabilityName":"Oracle Corporation WebLogic Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2017-10271","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1440,"advisory_id":"ae57b1dd-e045-4265-8107-6828aeb8a7e2","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-2628","source_published_at":"2022-09-08T00:00:00+00:00","published_at":"2026-10-24T21:02:36.112399+00:00","extraction_method":"structured","technologies":["core-kev","weblogic-server"],"cve_ids":["CVE-2018-2628"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle WebLogic Server Unspecified Vulnerability","summary":"Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-2628","products":[{"name":{"value":"WebLogic Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-2628","aliases":["CVE-2018-2628"],"affected":[],"modified":"2022-09-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2018-2628","notes":"https://www.oracle.com/security-alerts/cpuapr2018.html; https://nvd.nist.gov/vuln/detail/CVE-2018-2628","dueDate":"2022-09-29","product":"WebLogic Server","dateAdded":"2022-09-08","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-2628","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1336,"advisory_id":"734e4609-0a6d-4bc3-8925-e46010c401d8","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21839","source_published_at":"2023-05-01T00:00:00+00:00","published_at":"2026-10-24T21:01:21.448358+00:00","extraction_method":"structured","technologies":["core-kev","weblogic-server"],"cve_ids":["CVE-2023-21839"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle WebLogic Server Unspecified Vulnerability","summary":"Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2023-21839","products":[{"name":{"value":"WebLogic Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-21839","aliases":["CVE-2023-21839"],"affected":[],"modified":"2023-05-01T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2023-21839","notes":"https://www.oracle.com/security-alerts/cpujan2023.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-21839","dueDate":"2023-05-22","product":"WebLogic Server","dateAdded":"2023-05-01","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server.","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-21839","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1137,"advisory_id":"5cb94716-fb66-4bff-9cc9-be6b24334c2b","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-3506","source_published_at":"2024-06-03T00:00:00+00:00","published_at":"2026-10-24T20:56:56.279523+00:00","extraction_method":"structured","technologies":["core-kev","weblogic-server"],"cve_ids":["CVE-2017-3506"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle WebLogic Server OS Command Injection Vulnerability","summary":"Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2017-3506","products":[{"name":{"value":"WebLogic Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-3506","aliases":["CVE-2017-3506"],"affected":[],"modified":"2024-06-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-78"],"cveID":"CVE-2017-3506","notes":"https://www.oracle.com/security-alerts/cpuapr2017.html; https://nvd.nist.gov/vuln/detail/CVE-2017-3506","dueDate":"2024-06-24","product":"WebLogic Server","dateAdded":"2024-06-03","vendorProject":"Oracle","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document.","vulnerabilityName":"Oracle WebLogic Server OS Command Injection Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-3506","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1079,"advisory_id":"0afba4b9-4c30-423b-95f0-518911496937","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-14644","source_published_at":"2024-09-18T00:00:00+00:00","published_at":"2026-10-24T20:55:33.091311+00:00","extraction_method":"structured","technologies":["core-kev","weblogic-server"],"cve_ids":["CVE-2020-14644"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle WebLogic Server Remote Code Execution Vulnerability","summary":"Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2020-14644","products":[{"name":{"value":"WebLogic Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-14644","aliases":["CVE-2020-14644"],"affected":[],"modified":"2024-09-18T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2020-14644","notes":"https://www.oracle.com/security-alerts/cpujul2020.html  ;  https://nvd.nist.gov/vuln/detail/CVE-2020-14644","dueDate":"2024-10-09","product":"WebLogic Server","dateAdded":"2024-09-18","vendorProject":"Oracle","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution.","vulnerabilityName":"Oracle WebLogic Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-14644","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1014,"advisory_id":"50f8f69d-1e72-4f38-835b-5f689217e40c","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2883","source_published_at":"2025-01-07T00:00:00+00:00","published_at":"2026-10-24T20:54:52.582203+00:00","extraction_method":"structured","technologies":["core-kev","weblogic-server"],"cve_ids":["CVE-2020-2883"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle WebLogic Server Unspecified Vulnerability","summary":"Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2020-2883","products":[{"name":{"value":"WebLogic Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-2883","aliases":["CVE-2020-2883"],"affected":[],"modified":"2025-01-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2020-2883","notes":"https://www.oracle.com/security-alerts/cpuapr2020.html ; https://nvd.nist.gov/vuln/detail/CVE-2020-2883","dueDate":"2025-01-28","product":"WebLogic Server","dateAdded":"2025-01-07","vendorProject":"Oracle","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3.","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-2883","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":152,"advisory_id":"51339c4a-6a5a-4070-ab6d-8688f8080324","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21182","source_published_at":"2026-06-01T00:00:00+00:00","published_at":"2026-10-24T20:41:43.558454+00:00","extraction_method":"structured","technologies":["core-kev","weblogic-server"],"cve_ids":["CVE-2024-21182"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle WebLogic Server Unspecified Vulnerability","summary":"Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-21182","products":[{"name":{"value":"WebLogic Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-21182","aliases":["CVE-2024-21182"],"affected":[],"modified":"2026-06-01T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2024-21182","notes":"https://www.oracle.com/security-alerts/cpujul2024.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-21182","dueDate":"2026-06-04","product":"WebLogic Server","dateAdded":"2026-06-01","vendorProject":"Oracle","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-21182","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3683,"next_before":152}