Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

39 records

Vendor: Oracle Component: Jdeveloper Clear all filters
TI-2026-57613 CVE-2026-83424 · GHSA-pgvh-jwwq-qjpw

Information disclosure in Oracle JDeveloper

Priority LOW 39

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00437 Published 2026-09-15 No fix listed CWE-200
TI-2026-57612 CVE-2026-83423 · GHSA-2xcq-g575-88vm

Improper privilege management in Oracle JDeveloper

Priority MEDIUM 40

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-09-15 No fix listed CWE-269
TI-2026-43705 CVE-2026-61061 · GHSA-r8wp-652f-677f

Improper privilege management in Oracle JDeveloper

Priority LOW 32

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework).

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0013 Published 2026-07-21 No fix listed CWE-269
TI-2026-43294 CVE-2026-60629 · GHSA-j57r-gj3j-4v72

Improper access control in Oracle JDeveloper

Priority LOW 33

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualization Tools).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00282 Published 2026-07-21 No fix listed CWE-284
TI-2026-43287 CVE-2026-60622 · GHSA-9vxg-gf3x-5wh9

Improper access control in Oracle JDeveloper

Priority LOW 39

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2026-07-21 No fix listed CWE-284
TI-2026-43054 CVE-2026-60354 · GHSA-5g28-x48g-rr9m

Information disclosure in Oracle JDeveloper

Priority LOW 17

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualization Tools).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00275 Published 2026-07-21 No fix listed CWE-200
TI-2026-43053 CVE-2026-60353 · GHSA-3x77-gx75-cpgx

Improper access control in Oracle JDeveloper

Priority LOW 15

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces).

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00222 Published 2026-07-21 No fix listed CWE-284
TI-2026-43052 CVE-2026-60352 · GHSA-544w-8775-jhw9

Information disclosure in Oracle JDeveloper

Priority LOW 17

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00275 Published 2026-07-21 No fix listed CWE-200
TI-2026-43051 CVE-2026-60351 · GHSA-jjv8-5qvv-35qc

Improper access control in Oracle JDeveloper

Priority LOW 21

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00222 Published 2026-07-21 No fix listed CWE-284
TI-2026-43050 CVE-2026-60350 · GHSA-r39f-pm9v-43mg

Information disclosure in Oracle JDeveloper

Priority LOW 28

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces).

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00168 Published 2026-07-21 No fix listed CWE-200
TI-2026-43049 CVE-2026-60349 · GHSA-2q2m-qrpr-hh89

Information disclosure in Oracle JDeveloper

Priority LOW 26

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business Objects).

CVSS 3.1MEDIUM 5.9 Network Low privileges No interaction EPSS 0.00324 Published 2026-07-21 No fix listed CWE-200
TI-2026-43048 CVE-2026-60348 · GHSA-2jf3-3mg6-vvf7

Improper access control in Oracle JDeveloper

Priority LOW 26

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00331 Published 2026-07-21 No fix listed CWE-284
TI-2026-43045 CVE-2026-60345 · GHSA-vv8f-r6p9-4gvx

Improper access control in Oracle JDeveloper

Priority LOW 34

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00486 Published 2026-07-21 No fix listed CWE-284
TI-2022-07428 CVE-2022-23305 · GHSA-65fg-84f6-3jq3

SQL injection in JDBC Appender in Apache Log4j V1

Priority CRITICAL 85

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.66537 Published 2022-01-18 Partial fix · 2.0-alpha1 CWE-89
TI-2022-07425 CVE-2022-23302 · GHSA-w9p3-5cr8-m3jj

Deserialization of untrusted data in JMSSink in Apache Log4j 1.x

Priority HIGH 76

JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has ac…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.63841 Published 2022-01-18 Partial fix · 2.0-alpha1 CWE-502
TI-2020-08896 CVE-2020-11022 · GHSA-gxr4-xjj5-5px2

jQuery has a potential XSS vulnerability

Priority HIGH 75

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.99215 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 +2 CWE-79
TI-2019-09260 CVE-2019-12415 · GHSA-9jwc-q6j3-8g9g

XML external entity injection in Apache POI

Priority LOW 27

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from intern…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00998 Published 2019-10-23 Partial fix · 4.1.1 CWE-611
TI-2019-09249 CVE-2019-12402 · GHSA-53x6-4x5p-rrvv

Infinite loop in Apache Commons Compress

Priority MEDIUM 49

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.16157 Published 2019-08-29 Partial fix · 1.19 CWE-835
Load more