Oracle WebLogic Server
Coverage of Oracle WebLogic Server in the Nexus archive.
- Oracle support timelines for Fusion Middleware tighter than expected
Oracle has announced shorter-than-expected support timelines for its Oracle Fusion Middleware 12c Release 2, with Premier Support ending in December 2026 and Extended Support in December 2027. The company will offer a fee-based 'Market Driven Support' program post-2027, which critics describe as limited and costly. Oracle also confirmed future versions of its middleware will support IBM's AIX Unix operating system.
- Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
CISA added a high-severity vulnerability (CVE-2024-21182) in Oracle WebLogic Server to its KEV Catalog due to evidence of active exploitation. The flaw allows unauthenticated attackers to take control of vulnerable servers.
- CISA flags two-year-old Oracle flaw as actively exploited in attacks
CISA has ordered government agencies to secure their systems against a high-severity Oracle WebLogic Server vulnerability that was patched two years ago and is now actively exploited in attacks.