Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
NA
CVSSv4

CVE-2024-21181

CVSSv4: NA | CVSSv3: 9.8 | CVSSv2: NA | VMScore: 1000 | EPSS: 0.00043 | KEV: Not Included
Published: 16/07/2024 Updated: 21/11/2024

Vulnerability Summary

Unauthenticated Remote Takeover of Oracle WebLogic Server (CVSS 9.8)

A vulnerability is present in Oracle WebLogic Server, part of Oracle Fusion Middleware, affecting versions 12.2.1.4.0 and 14.1.1.0.0. This flaw can be easily exploited by unauthenticated attackers with network access via T3 and IIOP. If the attack is successful, the attacker can take over the Oracle WebLogic Server. The issue has a CVSS 3.1 Base Score of 9.8, impacting Confidentiality, Integrity, and Availability. The CVSS Vector is (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

oracle weblogic server 12.2.1.4.0

oracle weblogic server 14.1.1.0.0

References

NVD-CWE-noinfohttps://nvd.nist.govhttps://www.first.org/epsshttps://www.oracle.com/security-alerts/cpujul2024.htmlhttps://www.oracle.com/security-alerts/cpujul2024.html
Preferred Score:
CVSSv4
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
directory listings wordpress plugin – ulistingpostquantum-feldman-vssmatioCVE-2025-20115CVE-2025-2025HTML injectionSSTICVE-2025-2310CVE-2025-27363CVE-2025-2343logicaldoc enterpriseCVE-2025-2163dos
Home
/
Search Results
/
CVE-2024-21181
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook