Skip to main content

Sql Developer

4 CVEs product

Monthly

CVE-2023-21969 Apr 18, 20:15 MEDIUM This Month

Vulnerability in Oracle SQL Developer (component: Installation). Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Oracle Sql Developer
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-45105 Dec 18, 12:15 Maven MEDIUM PATCH This Month

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

Denial Of Service Apache Debian Oracle Business Intelligence +117
NVD VulDB
CVSS 3.1
5.9
EPSS
70.4%
Threat
5.3
CVE-2020-13956 Dec 02, 17:15 Maven MEDIUM PATCH This Month

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Apache Information Disclosure Oracle Active Iq Unified Manager Jd Edwards Enterpriseone Tools +16
NVD VulDB
CVSS 3.1
5.3
EPSS
8.7%
CVE-2020-14740 Oct 21, 15:15 LOW PATCH Monitor

Vulnerability in the SQL Developer Install component of Oracle Database Server. Rated low severity (CVSS 2.8), this vulnerability is low attack complexity.

Authentication Bypass Oracle Sql Developer
NVD
CVSS 3.1
2.8
EPSS
0.4%
EPSS 0% CVSS 6.7
MEDIUM This Month

Vulnerability in Oracle SQL Developer (component: Installation). Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Oracle Sql Developer
NVD
EPSS 70% 5.3 CVSS 5.9
MEDIUM PATCH This Month

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

Denial Of Service Apache Debian +119
NVD VulDB
EPSS 9% CVSS 5.3
MEDIUM PATCH This Month

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Apache Information Disclosure Oracle +18
NVD VulDB
EPSS 0% CVSS 2.8
LOW PATCH Monitor

Vulnerability in the SQL Developer Install component of Oracle Database Server. Rated low severity (CVSS 2.8), this vulnerability is low attack complexity.

Authentication Bypass Oracle Sql Developer
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy