oracle jdeveloper

Name: oracle jdeveloper
Brand: oracle

productUS

cpe:2.3:a:oracle:jdeveloper:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

8critical5high8medium4low

updated 2026-10-28

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	= 12.2.1.4.0
CVE-2020-11022US	medium6.1	99.2% (100th)	Exploit	no fix	2020-04-29	3 versions
CVE-2017-5645US	critical9.8	89.4% (100th)	Exploit	no fix	2017-04-17	3 versions
CVE-2019-11358US	medium6.1	86.8% (100th)	Exploit	no fix	2019-04-20	3 versions
CVE-2021-4104US	high7.5	80.6% (100th)	Exploit	no fix	2021-12-14	= 12.2.1.3.0
CVE-2022-23305US	critical9.8	66.5% (99th)	Exploit	no fix	2022-01-18	= 12.2.1.3.0
CVE-2015-9251US	medium6.1	29.7% (98th)	Exploit	no fix	2018-01-18	3 versions
CVE-2017-10273US	medium4.7	1.45% (73rd)	Exploit	no fix	2018-01-18	6 versions
CVE-2022-23302US	high8.8	63.8% (99th)	—	no fix	2022-01-18	= 12.2.1.3.0
CVE-2022-23307US	high8.8	54.4% (99th)	—	no fix	2022-01-18	= 12.2.1.3.0
CVE-2019-12402US	high7.5	16.2% (97th)	—	no fix	2019-08-30	= 12.2.1.4.0
CVE-2018-14718US	critical9.8	12.7% (96th)	—	no fix	2019-01-02	2 versions
CVE-2018-14721US	critical10.0	10.5% (96th)	—	no fix	2019-01-02	2 versions
CVE-2018-14719US	critical9.8	9.68% (95th)	—	no fix	2019-01-02	2 versions
CVE-2018-14720US	critical9.8	7.52% (94th)	—	no fix	2019-01-02	2 versions
CVE-2020-10683US	critical9.8	7.27% (94th)	—	no fix	2020-05-01	= 12.2.1.4.0
CVE-2016-3504US	critical9.8	3.47% (89th)	—	no fix	2016-07-21	5 versions
CVE-2017-3255US	medium5.8	1.76% (78th)	—	no fix	2017-01-27	7 versions
CVE-2018-2711US	high8.2	1.45% (73rd)	—	no fix	2018-01-18	5 versions
CVE-2019-12415US	medium5.5	1.00% (63rd)	—	no fix	2019-10-23	= 12.2.1.4.0
CVE-2019-2899US	low2.4	0.88% (59th)	—	no fix	2019-10-16	4 versions
CVE-2005-2292US	low2.1OT elevated	0.87% (59th)	—	no fix	2005-07-18	3 versions
CVE-2005-2291US	medium4.6	0.51% (44th)	—	no fix	2005-07-18	3 versions
CVE-2026-60345US	—	0.49% (42nd)	—	no fix	2026-07-21	2 versions
CVE-2026-60622US	—	0.41% (36th)	—	no fix	2026-07-21	2 versions
CVE-2008-2623US	low2.1	0.35% (29th)	—	no fix	2009-01-14	= 10.1.2.3
CVE-2008-2588US	low2.1	0.35% (29th)	—	no fix	2008-10-14	= 10.1.2.2
CVE-2026-60348US	—	0.33% (26th)	—	no fix	2026-07-21	2 versions
CVE-2026-60349US	—	0.32% (25th)	—	no fix	2026-07-21	2 versions
CVE-2026-60629US	—	0.28% (21st)	—	no fix	2026-07-21	2 versions
CVE-2026-60354US	—	0.27% (20th)	—	no fix	2026-07-21	2 versions
CVE-2026-60352US	—	0.27% (20th)	—	no fix	2026-07-21	2 versions
CVE-2026-60353US	—	0.22% (13th)	—	no fix	2026-07-21	2 versions
CVE-2026-60351US	—	0.22% (13th)	—	no fix	2026-07-21	2 versions
CVE-2026-60350US	—	0.17% (6th)	—	no fix	2026-07-21	2 versions
CVE-2026-61061US	—	0.13% (3rd)	—	no fix	2026-07-21	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control9 CVEs
CWE-502Deserialization of Untrusted Data7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-611Improper Restriction of XML External Entity Reference3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE36 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan