Description
Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading to unauthenticated remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Application Development Framework (ADF) | Oracle Corporation / Application Development Framework (ADF) | 12.2.1.3.0 | affected |
| Application Development Framework (ADF) | Oracle Corporation / Application Development Framework (ADF) | 12.2.1.4.0 | affected |
| jdeveloper | oracle / jdeveloper | 12.2.1.3.0 | affected |
| jdeveloper | oracle / jdeveloper | 12.2.1.4.0 | affected |