badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

CVE-2022-21445-for-12.2.1.3.0-Weblogic

概要 CVE-2022-21445（CVSSスコア9.8）は、信頼できないデータのデシリアライズの脆弱性であり、ADF Facesコンポーネントに存在することが確認されており、攻撃者が事前認証なしでリモートから悪用してRCEを実行できる可能性があります。 この脆弱性は、VNG CorporationのPeterJson氏とVNPTのNguyen Jang氏という2人のサイバーセキュリティ専門家によって発見されました。その後、Oracleは2021年10月にこの報告を受け、パッチのリリースまでに6か月、つまり2022年4月までかかりました。 この記事では、Oracle Business...

wildfly-clustering-faces-mojarra: com.sun.faces:jsf-impl: org.glassfish:jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include

A flaw was found in EAP. Any estate hosting a JSF app using the user-controlled-include pattern would permit EL injection, achieving unauthenticated RCE as the server process user...

CVE-2022-21445

CVE-2022-21445 エクスプロイト - PoC このツールキットは、Oracle ADF Facesを実行しているOracle WebLogic Server 12.2.1.xに影響する重大なJavaデシリアライゼーション脆弱性であるCVE-2022-21445のエクスプロイトペイロードを生成します。 この欠陥はRemoteApplicationResourceLoaderコンポーネントに存在し、攻撃者が特別に細工されたHTTP...

apache__myfaces_CVE-2011-4367_2-0-11

JavaServer Faces JSF および Jakarta Faces 仕様の Apache による実装 ブランチ main Jakarta Faces 5.0 の実装 4.1.x Jakarta Faces 4.1 の実装 4.0.x Jakarta Faces 4.0 の実装 リファクタリングされた 2.3-next コードベースに基づく...

CVE-2026-73961

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper...

CVE-2026-73961

CVE-2026-73961 is a critical vulnerability (CVSS 3.1 score 9.8 ) in the ADF Faces component of Oracle JDeveloper (Oracle Fusion Middleware), affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low co...

EUVD-2026-79315

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper...

PT-2026-92509

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper...

CVE-2026-73961: Improper Authentication

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper...

wildfly-clustering-faces-mojarra: com.sun.faces:jsf-impl: org.glassfish:jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include

A flaw was found in EAP. Any estate hosting a JSF app using the user-controlled-include pattern would permit EL injection, achieving unauthenticated RCE as the server process user...

CVE-2026-46581

A flaw was found in EAP. Any estate hosting a JSF app using the user-controlled-include pattern would permit EL injection, achieving unauthenticated RCE as the server process user...

EUVD-2026-46767

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDeveloper...

EUVD-2026-46764

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle JDeveloper executes to...

EUVD-2026-46766

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper...

CVE-2026-60351

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper...

CVE-2026-60350

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle JDeveloper executes to...

CVE-2026-60353

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDeveloper...

PT-2026-62445

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper version 12.2.1.4.0 Oracle JDeveloper version 14.1.2.0.0 Description An issue exists in the ADF Faces component of Oracle JDeveloper. An unauthenticated attacker with network access via HTTP can compromise the system. Successf...

PT-2026-62444

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper versions 12.2.1.4.0 Oracle JDeveloper versions 14.1.2.0.0 Description A flaw in the ADF Faces component of Oracle Fusion Middleware allows a low privileged attacker with access to the infrastructure where the software execute...