Oracle Critical Patch Update — July 2024

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

• High 7.5
  CVE-2024-21182 Exploited Public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1…
  EPSS 74%

Critical 1

• Critical 9.8
  CVE-2024-21181 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1…
  EPSS 1.1%

All vulnerabilities 63