Filter
AND

Versions

12.2.1.3.0
14
12.1.3.0.0
11
11.1.1.9.0
9
12.2.1.4.0
7
11.1.1.7.0
4
11.1.2.4.0
4
10.1.2
2
11.1.1.7.1
2
12.2.1.0.0
2
12.2.1.2.0
2
9.0.4
2
9.0.5
2
10.1.2.2
1
10.1.2.3
1
11.1.1.2.4
1
12.2.1.1.0
1

Oracle JDeveloperOracle ADF Faces Deserialization of Untrusted Data Vulnerability

critical
9.8
Exploited
First published (updated )
CVE-2022-21445

Apache Log4jA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.

critical
9.8
Zeroday
First published (updated )
CVE-2022-23307

Apache Log4jSQL injection in JDBC Appender in Apache Log4j V1

critical
9.8
Zeroday
First published (updated )
CVE-2022-23305

Apache Log4jDeserialization of untrusted data in JMSSink in Apache Log4j 1.x

high
8.8
Zeroday
First published (updated )
CVE-2022-23302

Oracle Retail Integration BusApache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

critical
9.8
First published (updated )
CVE-2021-45105

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

redhat/log4jDeserialization of untrusted data in JMSAppender in Apache Log4j 1.2

high
8.1
First published (updated )
CVE-2021-4104

Oracle Banking Digital ExperiencePotential XSS vulnerability in jQuery

medium
6.9
First published (updated )
CVE-2020-11022

Oracle Banking PlatformXSS, XEE

medium
5.5
First published (updated )
CVE-2019-12415

Oracle Application Development FrameworkVulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: OAM).…

low
3.5
First published (updated )
CVE-2019-2899

Oracle FLEXCUBE Investor ServicingThe file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get int…

high
7.5
First published (updated )
CVE-2019-12402

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

redhat/eap7-elytron-webXEE

critical
9.8
First published (updated )
CVE-2020-10683

Oracle Application Testing SuiteXSS, Input Validation

high
7.5
First published (updated )
CVE-2019-11358

FasterXML jackson-databindXEE

critical
9.8
First published (updated )
CVE-2018-14720

FasterXML jackson-databindSSRF

critical
10
First published (updated )
CVE-2018-14721

Oracle Financial Services Analytical Applications InfrastructureFasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code b…

critical
9.8
First published (updated )
CVE-2018-14718

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Financial Services Analytical Applications InfrastructureFasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code b…

critical
9.8
First published (updated )
CVE-2018-14719

Oracle JDeveloperVulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: Security…

high
8.2
First published (updated )
CVE-2018-2711

Oracle JDeveloperPath Traversal

medium
4.7
First published (updated )
CVE-2017-10273

Oracle Policy AutomationIn Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive s…

critical
9.8
First published (updated )
CVE-2017-5645

Oracle JDeveloperInfoleak

medium
5.8
First published (updated )
CVE-2017-3255

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Agile Product Lifecycle Management for ProcessXSS

medium
6.1
First published (updated )
CVE-2015-9251

Oracle JDeveloperUnspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0,…

critical
9.8
First published (updated )
CVE-2016-3504

Oracle JDeveloperUnspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.3 a…

low
2.1
First published (updated )
CVE-2008-2623

Oracle JDeveloperUnspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 a…

low
2.1
First published (updated )
CVE-2008-2588

Oracle JDeveloperOracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2)…

low
2.1
First published (updated )
CVE-2005-2292

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle JDeveloperOracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when startin…

medium
4.6
First published (updated )
CVE-2005-2291

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203