Oracle WebLogic Server <14.1.1.0.0 - Unauthorized Access
Title source: llmExploitation Summary
CVE-2024-21182 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 1, 2026. EIP tracks 6 public exploits from researchers including kursadalsan, dinosn, k4it0k1d.
AI-analyzed exploit summary This repository contains a functional exploit PoC for CVE-2024-21182, targeting Oracle WebLogic Server via JNDI injection. The exploit leverages reflection to manipulate JNDI references and trigger an LDAP lookup, potentially leading to remote code execution.
Description
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Exploits (6)
This repository contains a functional exploit PoC for CVE-2024-21182, targeting Oracle WebLogic Server via JNDI injection. The exploit leverages reflection to manipulate JNDI references and trigger an LDAP lookup, potentially leading to remote code execution.
This repository contains a functional exploit for CVE-2024-21182, demonstrating unauthenticated remote code execution (RCE) in Oracle WebLogic Server via T3/IIOP JNDI injection. The exploit leverages the `AggregatableOpaqueReference` gadget to bypass previous patches and trigger server-side JNDI resolution against an attacker-controlled LDAP server.
This repository contains a functional exploit PoC for CVE-2024-21182, targeting Oracle WebLogic Server via JNDI injection. The exploit leverages deserialization and JNDI manipulation to achieve remote code execution by binding a malicious object to a JNDI context.
This repository contains a functional exploit for CVE-2024-21182, demonstrating a JNDI injection vulnerability in Oracle WebLogic Server that leads to remote code execution (RCE). The exploit chain involves a malicious LDAP server, a Java payload, and a T3 client to trigger the vulnerability.
The repository claims to provide an exploit for CVE-2024-21182 but lacks actual exploit code, instead directing users to an external download link. The README contains vague details and no technical depth.
The repository claims to provide an exploit for CVE-2024-21182 but only includes a README with generic details and a link to an external download. No actual exploit code is present, and the README lacks technical depth.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N