Threats affecting pkg:maven/com.oracle/fusion-middleware-jdeveloper

A high-severity vulnerability exists in Oracle JDeveloper within Oracle Fusion Middleware, specifically in the Resource Catalog Services component. The flaw affects versions 12.2.1.4.0 and 14.1.2.0.0 and allows a low-privileged attacker with network access via HTTP to potentially take over the Oracle JDeveloper product. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes patches for the affected versions.