Sql Developer
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:sql_developer:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Sql Developer (c7ebf5a3-f669-5ec6-890c-ca0e99d5c674) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-21969 |
vulnerable | 2026-06-08 05:54:23.011629 |
Details available
MEDIUM (6.7)
Vulnerability in Oracle SQL Developer (component: Installation). Supported versions that are affected are Prior to 23.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle SQL Developer executes to compromise Oracle SQL Developer. Successful attacks of this vulnerability can result in takeover of Oracle SQL Developer. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Published: 2023-04-18T19:54:34.713Z
Updated: 2024-09-16T14:28:51.827Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45105 |
vulnerable | 2026-06-08 05:36:47.971917 |
Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.
Published: 2021-12-18T11:55:08.000Z
Updated: 2026-05-29T11:45:26.064Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13956 |
vulnerable | 2026-06-08 05:18:01.625391 |
Details available
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
Published: 2020-12-02T16:20:12.000Z
Updated: 2025-12-01T15:45:49.435Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.