Oracle JDeveloper vulnerabilities

10 known vulnerabilities in Oracle JDeveloper from Oracle. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle JDeveloper: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-83424Sep 15, 2026Oracle

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access

• 8.8 High severity

  Oracle JDeveloper: Improper Privilege Management

  CVE-2026-83423Sep 15, 2026Oracle

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.8 High severity

  Oracle JDeveloper: Improper Privilege Management

  CVE-2026-83306Sep 15, 2026Oracle

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource Catalog Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 8.2 High severity

  Oracle JDeveloper: Missing Authentication for Critical Functionality

  CVE-2026-83266Sep 15, 2026Oracle

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource Catalog Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

• 8.1 High severity

  Oracle JDeveloper: Improper Access Control

  CVE-2026-83067Sep 15, 2026Oracle

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 9.8 Critical severity

  Oracle JDeveloper: Improper Authentication

  CVE-2026-73961Sep 15, 2026Oracle

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 7.0 High severity

  Oracle JDeveloper: Improper Privilege Management

  CVE-2026-61061Jul 21, 2026Oracle

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the

• 7.5 High severity

  Oracle JDeveloper: Improper Access Control

  CVE-2026-60629Jul 21, 2026Oracle

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualization Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with networ

• 7.5 High severity

  Oracle JDeveloper: Improper Access Control

  CVE-2026-60622Jul 21, 2026Oracle

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access

• 7.2 High severity

  Oracle JDeveloper: Improper Access Control

  CVE-2026-60345Jul 21, 2026Oracle

  Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network acc