← Back

CVE-2026-60353

nvd nist
Published: Jul 21, 2026Modified: Jul 31, 2026

JSON object

Loading...
3.1
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.6 / Impact: 1.4
Source: secalert_us@oracle.com (Secondary)

Description

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle JDeveloper accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).

Affected (2)

Products: Oracle: Jdeveloper
1 product
Jdeveloper
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Version 12.2.1.4.0
Version 14.1.2.0.0

References (1)

Source: secalert_us@oracle.com
Vendor Advisory

Timeline

No history available yet.