Application Development Framework vulnerabilities

3 known vulnerabilities in Application Development Framework from Oracle. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Oracle Application Development Framework (ADF): Improper Access Control

  CVE-2026-46769Jun 17, 2026Oracle

  Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Shared Components). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privile

• 7.8 High severity

  Oracle Application Development Framework (ADF): Improper Access Control

  CVE-2026-35243Apr 21, 2026Oracle

  Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker

• 7.5 High severity

  Oracle ADF Faces Deserialization of Untrusted Data Exploited

  CVE-2022-21445Apr 19, 2022OracleEPSS 62.5%

  Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker