Threats tagged 'ghsa-pgvh-jwwq-qjpw'

A vulnerability in Oracle JDeveloper versions 12.2.1.4.0 and 14.1.2.0.0 allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.