Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
Filtered by product Jdeveloper
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-9251 2 Jquery, Oracle 47 Jquery, Agile Product Lifecycle Management For Process, Banking Platform and 44 more 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVE-2008-2623 1 Oracle 1 Jdeveloper 2024-11-21 2.1 LOW N/A
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors.
CVE-2008-2588 1 Oracle 1 Jdeveloper 2024-11-21 2.1 LOW N/A
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 allows local users to affect confidentiality via unknown vectors.
CVE-2005-2292 1 Oracle 1 Jdeveloper 2024-11-20 2.1 LOW N/A
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information.
CVE-2005-2291 1 Oracle 1 Jdeveloper 2024-11-20 4.6 MEDIUM N/A
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information.