Cyber Resilience

CVE-2023-22031

Oracle Weblogic Server 12.2.1.4.0 … 14.1.1.0.0

Published
18 July 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 4.4
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0055 43th percentile
Risk Priority 36 floored blend · peak EPSS

Summary

CVE-2023-22031 is a medium-severity an unspecified weakness vulnerability in Oracle Weblogic Server. Its CVSS base score is 4.4 (Medium).

Operationally, ranked at the 43th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle WebLogic…

more

Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2018-3191Same product: Oracle Weblogic Server
CVE-2025-30753Same product: Oracle Weblogic Server
CVE-2023-21839Same product: Oracle Weblogic Server
CVE-2026-35263Same product: Oracle Weblogic Server
CVE-2023-21842Same product: Oracle Weblogic Server
CVE-2026-60199Same product: Oracle Weblogic Server
CVE-2024-21007Same product: Oracle Weblogic Server
CVE-2023-22069Same product: Oracle Weblogic Server
CVE-2026-35298Same product: Oracle Weblogic Server
CVE-2026-46848Same product: Oracle Weblogic Server

Affected Assets

oracle
weblogic server
12.2.1.4.0, 14.1.1.0.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References