middleware_common_libraries_and_tools

productNL

cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical3high6medium0low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-11023US	medium6.1OT critical	84.9% (100th)	KEV	no fix	2020-04-29	—
CVE-2024-38819US	—	56.0% (99th)	Exploit	no fix	2024-12-19	—
CVE-2024-24549US	—	23.1% (98th)	Exploit	no fix	2024-03-13	—
CVE-2024-38816US	—	21.3% (98th)	Exploit	no fix	2024-09-13	—
CVE-2023-38709US	—	3.91% (90th)	Exploit	no fix	2024-04-04	—
CVE-2024-28752US	—	2.93% (87th)	Exploit	no fix	2024-03-15	—
CVE-2024-22262US	—	1.19% (68th)	Exploit	no fix	2024-04-16	—
CVE-2024-28182US	—	85.0% (100th)	—	no fix	2024-04-04	—
CVE-2024-2511US	—	52.4% (99th)	—	no fix	2024-04-08	—
CVE-2023-39410US	high7.5	2.22% (83rd)	—	no fix	2023-09-29	—
CVE-2023-4759US	high8.8	2.19% (82nd)	—	no fix	2023-09-12	—
CVE-2024-29131US	—	2.05% (81st)	—	no fix	2024-03-21	—
CVE-2023-44483US	medium6.5	1.55% (75th)	—	no fix	2023-10-20	—
CVE-2024-23807US	critical9.8	1.48% (74th)	—	no fix	2024-02-29	—
CVE-2024-22201US	high7.5	1.43% (73rd)	—	no fix	2024-02-26	—
CVE-2024-29857US	—	1.10% (66th)	—	no fix	2024-05-14	—
CVE-2020-17521US	medium5.5OT elevated	1.03% (64th)	—	no fix	2020-12-07	—
CVE-2019-12415US	medium5.5	1.00% (63rd)	—	no fix	2019-10-23	—
CVE-2024-30171US	—	0.90% (60th)	—	no fix	2024-05-14	—
CVE-2023-51775US	—OT elevated	0.87% (59th)	—	no fix	2024-02-29	—
CVE-2024-34447US	—	0.77% (56th)	—	no fix	2024-05-03	—
CVE-2024-30172US	—	0.75% (55th)	—	no fix	2024-05-14	—
CVE-2024-23635US	medium6.1	0.37% (31st)	—	no fix	2024-02-02	—
CVE-2023-35116US	medium4.7	0.35% (29th)	—	no fix	2023-06-14	—

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1 CVEs
CWE-125Out-of-bounds Read1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.