Oracle JDeveloper vulnerabilities

Vulnerability in Oracle JDeveloper (Security Framework component) allows a low-privileged attacker with local access to compromise and take over the application. Exploitation is difficult.

Vulnerability in Oracle JDeveloper (Data Visualization Tools component) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker via HTTP can access and modify data, though exploitation is difficult.

In Oracle JDeveloper versions 12.2.1.4.0 and 14.1.2.0.0, a vulnerability in the Security Framework component allows an unauthenticated attacker to remotely access critical data via HTTP. CVSS 7.5 (confidentiality).

Vulnerability in Oracle JDeveloper (versions 12.2.1.4.0 and 14.1.2.0.0) in the Data Visualization Tools component. Difficult to exploit, allows unauthenticated attacker to gain unauthorized read access to a subset of data.

Vulnerability in Oracle JDeveloper (ADF Faces component) allows a low-privileged attacker, under difficult conditions, unauthorized read access to a subset of data. Attack requires network access via HTTP.

Vulnerability in Oracle JDeveloper (versions 12.2.1.4.0 and 14.1.2.0.0) in the ADF Faces component. Difficult to exploit, allows unauthenticated attacker to gain unauthorized read access to a subset of data.

Vulnerability in Oracle JDeveloper (versions 12.2.1.4.0 and 14.1.2.0.0) in the ADF Faces component. Difficult to exploit; an unauthenticated attacker via HTTP can gain unauthorized read and modify access to data.

Vulnerability in Oracle JDeveloper (ADF Faces component) allows a low-privileged attacker with local access to gain unauthorized access to critical data. The attack may affect other products.

Vulnerability in Oracle JDeveloper (ADF Faces). Difficult to exploit, but an unauthenticated attacker via HTTP can gain full access to data.