CVE-2005-2292

LOW · CVSS 2.1 EPSS 0.87%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-07-18 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 2.1. It affects Oracle.

CVE

CVE-2005-2292

Severity

LOW

CVSS

2.1

EPSS

0.87%

Oracle

Original NVD Description

Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information.