cbcvebase.
CVE-2019-2904
published 2019-10-16

CVE-2019-2904: Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0…

critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper and ADF. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected

50 ranges· showing 25
VendorProductVersion rangeFixed in
oracleapplication_testing_suite
oracleapplication_testing_suite
oracleapplication_testing_suite
oracleapplication_testing_suite
oraclebanking_enterprise_collections
oraclebanking_enterprise_collections
oraclebanking_enterprise_originations
oraclebanking_enterprise_originations
oraclebanking_enterprise_product_manufacturing
oraclebanking_enterprise_product_manufacturing
oraclebanking_platform
oraclebanking_platform
oraclebanking_platform
oraclebanking_platform
oraclebanking_platform
oraclebanking_platform
oraclebanking_platform
oraclebanking_platform
oraclebanking_platform
oraclebusiness_process_management_suite
oraclebusiness_process_management_suite
oracleclinical
oraclecommunications_diameter_signaling_router8.0.0.0 – 8.4.0.5
oraclecommunications_network_integrity7.3.2 – 7.3.6
oraclecommunications_service_broker