Known Vulnerabilities for Jdeveloper by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Jdeveloper" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-23307 | CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a c... | 8.8 - HIGH | 2022-01-18 | 2023-02-24 |
| CVE-2022-23305 | By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inser... | 9.8 - CRITICAL | 2022-01-18 | 2023-02-24 |
| CVE-2022-23302 | JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to... | 8.8 - HIGH | 2022-01-18 | 2023-02-24 |
| CVE-2022-21445 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that ar... | 9.8 - CRITICAL | 2022-04-19 | 2022-04-28 |
| CVE-2021-4104 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j c... | 7.5 - HIGH | 2021-12-14 | 2023-12-22 |
| CVE-2020-11022 | In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing... | 6.1 - MEDIUM | 2020-04-29 | 2023-11-07 |
| CVE-2020-10683 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attac... | 9.8 - CRITICAL | 2020-05-01 | 2023-11-07 |
| CVE-2019-11358 | jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of ... | 6.1 - MEDIUM | 2019-04-20 | 2023-11-07 |
| CVE-2019-2904 | Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions... | 9.8 - CRITICAL | 2019-10-16 | 2021-05-18 |
| CVE-2019-2899 | Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: OAM). Supported versions that ... | 2.4 - LOW | 2019-10-16 | 2023-01-31 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Jdeveloper | 9.0.5 | All | All | All |
| Application | Oracle | Jdeveloper | 9.0.4 | All | All | All |
| Application | Oracle | Jdeveloper | 12.2.1.4.0 | All | All | All |
| Application | Oracle | Jdeveloper | 12.2.1.3.0 | All | All | All |
| Application | Oracle | Jdeveloper | 12.2.1.2.0 | All | All | All |
| Application | Oracle | Jdeveloper | 12.2.1.1.0 | All | All | All |
| Application | Oracle | Jdeveloper | 12.2.1.0.0 | All | All | All |
| Application | Oracle | Jdeveloper | 12.1.3.0.0 | All | All | All |
| Application | Oracle | Jdeveloper | 11.1.2.4.0 | All | All | All |
| Application | Oracle | Jdeveloper | 11.1.1.9.0 | All | All | All |
| Application | Oracle | Jdeveloper | 11.1.1.7.1 | All | All | All |
| Application | Oracle | Jdeveloper | 11.1.1.7.0 | All | All | All |
| Application | Oracle | Jdeveloper | 11.1.1.2.4 | All | All | All |
| Application | Oracle | Jdeveloper | 10.1.2.3 | All | All | All |
| Application | Oracle | Jdeveloper | 10.1.2.2 | All | All | All |
| Application | Oracle | Jdeveloper | 10.1.2 | All | All | All |
| Application | Oracle | Jdeveloper | - | All | All | All |