Threats tagged 'ghsa-2xcq-g575-88vm'

A high-severity vulnerability exists in Oracle JDeveloper within Oracle Fusion Middleware Security Framework. It affects versions 12.2.1.4.0 and 14.1.2.0.0. The flaw allows a low-privileged attacker with network access via HTTP to potentially take over the Oracle JDeveloper product. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.