Skip to content
Oracle Jdeveloper vulnerabilities
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle...
CVE-2026-91322
3.3 Low
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle...
CVE-2026-91320
5.7 Medium
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java...
CVE-2026-91319
5.9 Medium
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security...
CVE-2026-91318
6.5 Medium
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF...
CVE-2026-91317
5.9 Medium
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)...
CVE-2026-87334
5.5 Medium
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle...
CVE-2026-83424
7.5 High
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security...
CVE-2026-83423
8.8 High
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource...
CVE-2026-83306
8.8 High
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource...
CVE-2026-83266
8.2 High
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared...
CVE-2026-83067
8.1 High
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)...
CVE-2026-73961
9.8 Critical
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security...
CVE-2026-61061
7.0 High
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data...
CVE-2026-60629
7.5 High
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security...
CVE-2026-60622
7.5 High
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data...
CVE-2026-60354
3.7 Low
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)...
CVE-2026-60353
3.1 Low
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)...
CVE-2026-60352
3.7 Low
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)...
CVE-2026-60351
4.8 Medium
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)...
CVE-2026-60350
6.5 Medium
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java...
CVE-2026-60349
5.9 Medium
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)...
CVE-2026-60348
5.9 Medium
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared...
CVE-2026-60345
7.2 High
-
oracle adf faces, application development framework, jdeveloper +1 more +3 more
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)...
CVE-2022-21445
In KEVPublic exploit
EPSS 62.5%
9.8 Critical
-
apache chainsaw, log4j, apache software foundation log4j 1.x +24 more +26 more
A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.
CVE-2022-23307
Fix available
EPSS 54.4%
8.8 High
-
apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +26 more +28 more
SQL injection in JDBC Appender in Apache Log4j V1
CVE-2022-23305
Public exploitFix available
EPSS 66.5%
9.8 Critical
-
apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +24 more +26 more
Deserialization of untrusted data in JMSSink in Apache Log4j 1.x
CVE-2022-23302
Fix available
EPSS 63.8%
8.8 High
-
apache log4j, apache software foundation log4j2, debian linux +114 more +116 more
Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
CVE-2021-45105
Public exploitFix available
EPSS 100.0%
5.9 Medium
-
apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 more
Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2
CVE-2021-4104
Public exploitFix available
EPSS 80.6%
7.5 High
-
jquery, debian linux, drupal +67 more +69 more
jQuery has a potential XSS vulnerability
CVE-2020-11022
Public exploitFix available
EPSS 99.2%
6.9 Medium
-
dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 more
dom4j allows External Entities by default which might enable XXE attacks
CVE-2020-10683
Fix available
9.8 Critical
-
apache poi, oracle application testing suite, banking enterprise originations +24 more +26 more
Improper Restriction of XML External Entity Reference in Apache POI
CVE-2019-12415
Fix available
5.5 Medium
-
oracle jdeveloper, application development framework, hyperion financial management +1 more +3 more
Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component:...
CVE-2019-2899
2.4 Low
-
apache commons compress, fedoraproject fedora, oracle banking payments +16 more +18 more
Denial of Service in Apache Commons Compress
CVE-2019-12402
Fix available
EPSS 16.2%
7.5 High
-
backdropcms backdrop, drupal, jquery +102 more +104 more
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
CVE-2019-11358
Public exploitFix available
EPSS 86.8%
6.1 Medium
-
fasterxml jackson-databind, debian linux, oracle banking platform +9 more +11 more
Server-Side Request Forgery (SSRF) in jackson-databind
CVE-2018-14721
Fix available
EPSS 10.5%
10.0 Critical
-
fasterxml jackson-databind, debian linux, oracle banking platform +9 more +11 more
XML External Entity Reference (XXE) in jackson-databind
CVE-2018-14720
Fix available
9.8 Critical
-
fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +17 more +19 more
Arbitrary Code Execution in jackson-databind
CVE-2018-14719
Fix available
9.8 Critical
-
fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +22 more +24 more
Arbitrary Code Execution in jackson-databind
CVE-2018-14718
Fix available
EPSS 12.7%
9.8 Critical
-
jquery, oracle agile product lifecycle management for process, banking platform +44 more +46 more
Cross-Site Scripting (XSS) in jquery
CVE-2015-9251
Public exploitFix available
EPSS 29.7%
6.1 Medium
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent:...
CVE-2018-2711
8.2 High
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent:...
CVE-2017-10273
Public exploit
4.7 Medium
-
apache log4j, netapp oncommand api services, oncommand insight +76 more +78 more
Deserialization of Untrusted Data in Log4j
CVE-2017-5645
Public exploitFix available
EPSS 89.4%
9.8 Critical
-
oracle jdeveloper
Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: ADF...
CVE-2017-3255
5.8 Medium
-
oracle jdeveloper
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7...
CVE-2016-3504
9.8 Critical
-
oracle jdeveloper
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2...
CVE-2008-2623
2.1 Low
-
oracle jdeveloper
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2...
CVE-2008-2588
2.1 Low
-
oracle jdeveloper
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, ...
CVE-2005-2292
2.1 Low
-
oracle jdeveloper
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when...
CVE-2005-2291
4.6 Medium