Product by Oracle

Oracle JDeveloper

36 known vulnerabilities in Oracle JDeveloper (Oracle), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Oracle JDeveloper (Oracle)

Critical	CVE-2017-5645	Apache Log4j: Deserialization of Untrusted Data also in 74 other products	9.8	17.04.2017
Critical	CVE-2022-23305	SQL injection in JDBC Appender in Apache Log4j V1 also in 29 other products	9.8	18.01.2022
Critical	CVE-2018-14721	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 11 other products	10.0	02.01.2019
Critical	CVE-2018-14718	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 24 other products	9.8	02.01.2019
High	CVE-2022-23302	Deserialization of untrusted data in JMSSink in Apache Log4j 1.x also in 27 other products	8.8	18.01.2022
High	CVE-2022-23307	Apache Log4j 1.x: Deserialization of Untrusted Data also in 26 other products	8.8	18.01.2022
Critical	CVE-2018-14719	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 19 other products	9.8	02.01.2019
Critical	CVE-2018-14720	FasterXML Jackson-databind: XML External Entity (XXE) also in 11 other products	9.8	02.01.2019
Critical	CVE-2020-10683	Dom4j Project Dom4j: XML External Entity (XXE) also in 36 other products	9.8	01.05.2020
High	CVE-2021-4104	Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 also in 45 other products	7.5	14.12.2021
Medium	CVE-2020-11022	jQuery has a potential XSS vulnerability also in 63 other products	6.9	29.04.2020
High	CVE-2019-12402	Apache Commons Compress: Infinite Loop also in 19 other products	7.5	29.08.2019
Critical	CVE-2016-3504	Oracle JDeveloper: security vulnerability	9.8	21.07.2016
Medium	CVE-2019-11358	Drupal core: security vulnerability also in 89 other products	6.1	19.04.2019
Medium	CVE-2021-45105	Apache Log4j2 does not always protect from infinite recursion in lookup evaluation also in 107 other products	5.9	18.12.2021
Medium	CVE-2015-9251	jQuery: Cross-Site Scripting (XSS) also in 45 other products	6.1	18.01.2018
High	CVE-2018-2711	Oracle JDeveloper: security vulnerability also in 1 other product	8.2	18.01.2018
Medium	CVE-2017-3255	Oracle JDeveloper: security vulnerability	5.8	27.01.2017
High	CVE-2026-60345	Oracle JDeveloper: Improper Access Control also in 2 other products	7.2	21.07.2026
High	CVE-2026-60622	Oracle JDeveloper: Improper Access Control also in 2 other products	7.5	21.07.2026
Medium	CVE-2017-10273	Oracle JDeveloper: Denial of Service also in 1 other product	4.7	18.01.2018
High	CVE-2026-60629	Oracle JDeveloper: Improper Access Control also in 2 other products	7.5	21.07.2026
Medium	CVE-2019-12415	Apache POI: XML External Entity (XXE) also in 26 other products	5.5	23.10.2019
High	CVE-2026-61061	Oracle JDeveloper: Improper Privilege Management also in 2 other products	7.0	21.07.2026
Medium	CVE-2026-60348	Oracle JDeveloper: Improper Access Control also in 2 other products	5.9	21.07.2026

All vulnerabilities in search

News

SSA-501673 V1.0: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Productssiemens-productcert
SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert

All products by Oracle

Key figures

Vulnerabilities

News