http_server

productNL

cpe:2.3:a:oracle:http_server:14.1.1.0.0:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical1high3medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-24549US	—	23.1% (98th)	Exploit	no fix	2024-03-13	—
CVE-2024-28182US	—	85.0% (100th)	—	no fix	2024-04-04	—
CVE-2023-44483US	medium6.5	1.55% (75th)	—	no fix	2023-10-20	—
CVE-2024-22201US	high7.5	1.43% (73rd)	—	no fix	2024-02-26	—
CVE-2023-51775US	—OT elevated	0.87% (59th)	—	no fix	2024-02-29	—
CVE-2024-23635US	medium6.1	0.37% (30th)	—	no fix	2024-02-02	—
CVE-2023-35116US	medium4.7	0.35% (29th)	—	no fix	2023-06-14	—

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm1 CVEs
CWE-532Insertion of Sensitive Information into Log File1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.