Known vulnerabilities in Oracle JDeveloper

Vendor: Oracle
Software: Oracle JDeveloper
Software CPE: cpe:2.3:a:oracle:oracle_jdeveloper:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 19
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle JDeveloper Oracle JDeveloper is affected by 19 known vulnerabilities: 4 high, 11 medium, 4 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 -
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 - 20.02.2024 -
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 - 20.02.2024 -
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 - 08.06.2023 -
#VU75240 - Improper input validation
CVE-2018-14371		 CWE-20 Medium
No
No
 - 18.04.2023 -
#VU73244 - Resource exhaustion
CVE-2023-26464		 CWE-400 Medium
No
No
 - 10.03.2023 -
#VU71586 - Out-of-bounds write
CVE-2022-40152		 CWE-787 Medium
No
No
 - 26.01.2023 -
#VU62521 - Improper input validation
CVE-2022-21445		 CWE-20 High
No
Exploited
 - 22.04.2022 -
#VU59936 - Improper input validation
CVE-2021-42575		 CWE-20 High
No
No
 - 23.01.2022 -
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 -
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 -
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 -
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683		 CWE-749 Medium
No
No
 - 26.05.2020 -
#VU27217 - Improper input validation
CVE-2019-2899		 CWE-20 Low
No
No
 - 23.04.2020 -
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 - 21.04.2020 -
#VU24597 - Improper input validation
CVE-2019-2904		 CWE-20 High
No
No
 - 25.01.2020 -
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 - 06.11.2019 -
#VU22185 - Resource Management Errors
CVE-2019-12402		 CWE-399 Medium
No
No
 - 23.10.2019 -
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 - 28.03.2019 -