CVE-2015-4838

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote authenticated users to affect confidentiality via vectors related to ADF Faces...

Design/Logic Flaw

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote authenticated users to affect confidentiality via vectors related to ADF Faces...

CVE-2015-4909

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect integrity via vectors related to ADF Faces...

CVE-2015-4838

CVE-2015-4838 affects Oracle Fusion Middleware’s JDeveloper component (ADF Faces subcomponent). The vulnerability allows remote access to data confidentiality for authenticated users by exploiting the ADF Faces subcomponent in affected releases: Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, an...

CVE-2015-4909

CVE-2015-4909 concerns an unspecified vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware, affecting versions 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0. The issue allows remote attackers to compromise integrity via vectors related to the ADF Faces subcomponent. The NVD entry...

CVE-2015-4909: Undefined Security Weakness

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect integrity via vectors related to ADF Faces...

CVE-2015-4838: Undefined Security Weakness

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote authenticated users to affect confidentiality via vectors related to ADF Faces...

PT-2015-2470

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper versions 11.1.2.4.0 through 12.1.3.0.0 Description The issue is related to errors in the code of the Oracle JDeveloper component in Oracle Fusion Middleware, allowing remote attackers to affect data integrity. This is achieve...

PT-2015-2531

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper versions 11.1.2.4.0 through 12.1.3.0.0 Description The issue is related to errors in the code of the Oracle JDeveloper component in Oracle Fusion Middleware, allowing remote authenticated users to affect confidentiality. This...

Oracle JDeveloper ADF Faces DoS (July 2015 CPU)

The version of Oracle JDeveloper installed on the remote host is missing a security patch. It is, therefore, affected by an unspecified flaw in the Application Development Framework ADF Faces subcomponent that allows an unauthenticated, remote attacker to cause a denial of service condition...

CVE-2015-4742

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect availability via vectors related to ADF Faces...

Design/Logic Flaw

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect availability via vectors related to ADF Faces...

CVE-2015-4742

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect availability via vectors related to ADF Faces...

CVE-2015-4742

CVE-2015-4742 describes an unspecified vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware, affecting versions 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0. It allows remote attackers to impact availability via vectors related to ADF Faces. The connected sources cor...

PT-2015-6686

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper versions 11.1.1.7.0 through 11.1.2.4.0 Oracle JDeveloper versions 12.1.2.0.0 through 12.1.3.0.0 Description The issue affects the availability of the system, allowing remote attackers to exploit it via vectors related to ADF...

CVE-2015-4742: Undefined Security Weakness

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect availability via vectors related to ADF Faces...

Oracle JDeveloper ADF Faces goButton XSS (October 2014 CPU)

The version of Oracle JDeveloper installed on the remote host is missing a security patch. It is, therefore, affected by a cross-site scripting XSS vulnerability in the Application Development Framework ADF Faces subcomponent due to improper encoding of URLs that are specified as a target for the...

SEC Consult SA-20141015-0 :: Potential Cross-Site Scripting in ADF Faces

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20141015-0 ======================================================================= title: Potential Cross-Site Scripting product: ADF Faces vulnerable version: 12.1.2.0 fixed version: versions with CPU...

CVE-2014-6522

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.4, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via vectors related to ADF Faces...

Design/Logic Flaw

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.4, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via vectors related to ADF Faces...