CyberRota Analysis
AI-GeneratedOracle JDeveloper versions 12.2.1.4.0 and 14.1.2.0.0 are vulnerable to an easily exploitable flaw that allows low-privileged attackers with access to the execution environment to compromise the application. Successful exploitation can lead to unauthorized access to sensitive data, potentially affecting other products within the Oracle Fusion Middleware ecosystem. Organizations using these specific versions of Oracle JDeveloper should prioritize patching to mitigate the risk of data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle JDeveloper executes to compromise Oracle JDeveloper. While the vulnerability is in Oracle JDeveloper, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle JDeveloper accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Related CVEs
Other vulnerabilities affecting the same vendor(s)