Product by Oracle

SQL Developer

10 known vulnerabilities in SQL Developer (Oracle), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in SQL Developer (Oracle)

Medium	CVE-2021-45105	Apache Log4j2 does not always protect from infinite recursion in lookup evaluation also in 107 other products	5.9	18.12.2021
Medium	CVE-2025-48924	Apache Commons Lang: Uncontrolled Recursion also in 28 other products	5.3	11.07.2025
Medium	CVE-2020-13956	Apache HttpClient: security vulnerability also in 23 other products	5.3	02.12.2020
Medium	CVE-2025-4949	XXE vulnerability in Eclipse JGit also in 2 other products	5.3	21.05.2025
Critical	CVE-2026-33557	Apache Kafka: Missing JWT token validation in OAUTHBEARER authentication also in 6 other products	9.1	20.04.2026
High	CVE-2025-27553	Apache Commons VFS: Possible path traversal issue when using NameScope.DESCENDENT also in 3 other products	7.5	23.03.2025
High	CVE-2025-66566	yawkat LZ4 Java has a possible information leak in Java safe decompressor also in 5 other products	—	05.12.2025
Medium	CVE-2025-21502	Oracle Java SE: security vulnerability also in 14 other products	4.8	21.01.2025
Medium	CVE-2023-21969	Oracle SQL Developer: security vulnerability also in 1 other product	6.7	18.04.2023
Low	CVE-2020-14740	Oracle SQL Developer: security vulnerability also in 1 other product	2.8	21.10.2020