CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2024-07-16
Oracle WebLogic Server T3/IIOP Protocol Information Disclosure Vulnerability Advisory (CVE-2024-21182)
[Affected Scope] Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0.
[Impact] Unauthenticated remote attackers can exploit this vulnerability via T3 or IIOP protocols to gain unauthorized access to critical data or compromise all accessible data.
[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or restrict/disable T3 and IIOP protocols if they are not required.