Live › vulnerability › CVE-2026-87334
Go to dashboardOracle JDeveloper's ADF Faces component has a flaw that lets a low-privileged user who can log on to the machine where JDeveloper runs compromise the tool. A successful attack gives access to data the JDeveloper process can reach, mainly confidentiality impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run Oracle JDeveloper 12.2.1.4.0 or 14.1.2.0.0 on shared or multi-user machines, where other accounts can log on to the host. Single-user workstations where only the developer logs on face much less exposure. The sources do not describe a network-facing service.
No product ranges from the sources yet.
12.2.1.4.0 and 14.1.2.0.0.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle JDeveloper executes to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle JDeveloper accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-87334")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.