CVE-2014-6522

Oracle JDeveloper ADF Faces goButton XSS (CVE-2014-6522) is described in the October 2014 CPU plugin as an XSS vulnerability in the ADF Faces subcomponent caused by improper encoding of URLs used as targets for the goButton. An unauthenticated, remote attacker can exploit this to execute arbitrar...

CVE-2014-6522: Undefined Security Weakness

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.4, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via vectors related to ADF Faces...