Known vulnerabilities in Oracle JDeveloper

Known vulnerabilities in Oracle JDeveloper

Vendor: Oracle

Software: Oracle JDeveloper

Software CPE: cpe:2.3:a:oracle:oracle_jdeveloper:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 19

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU111165 - Improper Access Control CVE-2025-48734	CWE-284	Medium	No	No	-	16.06.2025	SB2025061643 SB2025061644 SB2025061645 and 141 more
#VU86625 - Resource exhaustion CVE-2024-26308	CWE-400	Medium	No	No	-	20.02.2024	SB2024022033 SB2024022937 SB2024031520 and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-25710	CWE-835	Medium	No	No	-	20.02.2024	SB2024022033 SB2024022937 SB2024031520 and 102 more
#VU77107 - Incorrect Default Permissions CVE-2023-2976	CWE-276	Low	No	No	-	08.06.2023	SB2023060849 SB2023071712 SB2023072512 and 157 more
#VU75240 - Improper input validation CVE-2018-14371	CWE-20	Medium	No	No	-	18.04.2023	SB2023041868 SB2020051292
#VU73244 - Resource exhaustion CVE-2023-26464	CWE-400	Medium	No	No	-	10.03.2023	SB2023031040 SB2023032716 SB2023050514 and 22 more
#VU71586 - Out-of-bounds write CVE-2022-40152	CWE-787	Medium	No	No	-	26.01.2023	SB2023012669 SB2023012670 SB2023013124 and 52 more
#VU62521 - Improper input validation CVE-2022-21445	CWE-20	High	No	Exploited	-	22.04.2022	SB2022042292 SB2024122407
#VU59936 - Improper input validation CVE-2021-42575	CWE-20	High	No	No	-	23.01.2022	SB2022012333 SB2022072039 SB2022071971 and 5 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-23305	CWE-89	Medium	No	No	-	18.01.2022	SB2022011818 SB2022012640 SB2022012641 and 94 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU54853 - Resource exhaustion CVE-2021-36090	CWE-400	Medium	No	No	-	14.07.2021	SB2021071408 SB2021080809 SB2021100411 and 70 more
#VU28238 - Exposed Dangerous Method or Function CVE-2020-10683	CWE-749	Medium	No	No	-	26.05.2020	SB2020050106 SB2020052616 SB2020071632 and 43 more
#VU27217 - Improper input validation CVE-2019-2899	CWE-20	Low	No	No	-	23.04.2020	SB2020042313 SB2019101561
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Available	No	-	21.04.2020	SB2020042126 SB2020052033 SB2020052103 and 181 more
#VU24597 - Improper input validation CVE-2019-2904	CWE-20	High	No	No	-	25.01.2020	SB2020011463 SB2020042108 SB2020042109 and 20 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-12415	CWE-611	High	No	No	-	06.11.2019	SB2019110635 SB2020012308 SB2020012309 and 42 more
#VU22185 - Resource Management Errors CVE-2019-12402	CWE-399	Medium	No	No	-	23.10.2019	SB2019083014 SB2020042210 SB2020071665 and 13 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Available	No	-	28.03.2019	SB2019032804 SB2019041026 SB2019041801 and 155 more