# Oracle JDeveloper vulnerabilities Source: https://junglewise.ai/threats/technologies/jdeveloper Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/jdeveloper.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 24 vulnerabilities in Oracle JDeveloper: 0 in the last 7 days and 11 in the last 90 days, 2 of them critical and 1 exploited in the wild. The most recent, CVE-2026-91320, was published on 20 October 2026. 5 vulnerabilities in the last four weeks, down 17% on the four before (6). 0 critical against 1. ## Counts - Last 7 days: 0 - Last 30 days: 5 - Last 90 days: 11 - All time: 24 (2 critical, 1 exploited in the wild) ## About Oracle JDeveloper Oracle JDeveloper is an integrated development environment for Java and Oracle application development. ## Latest Oracle JDeveloper vulnerabilities - [CVE-2026-91320: Oracle JDeveloper privilege escalation in component](https://junglewise.ai/threats/cve-2026-91320-vulnerability-in-the-oracle-jdeveloper-product-of-oracle-fusion) (medium, CVSS 5.7, published 20 Oct 2026) - [CVE-2026-91319: Oracle JDeveloper data integrity violation in Java Business Objects](https://junglewise.ai/threats/cve-2026-91319-vulnerability-in-the-oracle-jdeveloper-product-of-oracle-fusion) (medium, CVSS 5.9, published 20 Oct 2026) - [CVE-2026-91318: Oracle JDeveloper cross-site scripting in Security Framework](https://junglewise.ai/threats/cve-2026-91318-vulnerability-in-the-oracle-jdeveloper-product-of-oracle-fusion) (medium, CVSS 6.5, published 20 Oct 2026) - [CVE-2026-91317: Oracle JDeveloper remote code execution in ADF Databinding](https://junglewise.ai/threats/cve-2026-91317-vulnerability-in-the-oracle-jdeveloper-product-of-oracle-fusion) (medium, CVSS 5.9, published 20 Oct 2026) - [CVE-2026-87334: Oracle JDeveloper information disclosure in ADF Faces](https://junglewise.ai/threats/cve-2026-87334-vulnerability-in-the-oracle-jdeveloper-product-of-oracle-fusion) (medium, CVSS 5.5, published 20 Oct 2026) - [CVE-2026-83424: Oracle JDeveloper unauthorized information disclosure](https://junglewise.ai/threats/cve-2026-83424-oracle-jdeveloper-unauthorized-information-disclosure) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-83423: Oracle JDeveloper authentication bypass in Security Framework](https://junglewise.ai/threats/cve-2026-83423-oracle-jdeveloper-authentication-bypass-in-security-framework) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-83306: Oracle JDeveloper privilege escalation in Resource Catalog Services](https://junglewise.ai/threats/cve-2026-83306-oracle-jdeveloper-privilege-escalation-in-resource-catalog) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-83266: Oracle JDeveloper authentication bypass in Resource Catalog Services](https://junglewise.ai/threats/cve-2026-83266-oracle-jdeveloper-authentication-bypass-in-resource-catalog) (high, CVSS 8.2, published 15 Sep 2026) - [CVE-2026-83067: Oracle JDeveloper data manipulation and denial of service in ADF Shared Components](https://junglewise.ai/threats/cve-2026-83067-oracle-jdeveloper-data-manipulation-and-denial-of-service-in-adf) (high, CVSS 8.1, published 15 Sep 2026) - [CVE-2026-73961: Oracle JDeveloper remote code execution in ADF Faces](https://junglewise.ai/threats/cve-2026-73961-oracle-jdeveloper-remote-code-execution-in-adf-faces) (critical, CVSS 9.8, published 15 Sep 2026) - [CVE-2026-61061: Oracle JDeveloper compromise in Security Framework](https://junglewise.ai/threats/cve-2026-61061-oracle-jdeveloper-compromise-in-security-framework) (high, CVSS 7, published 21 Jul 2026) - [CVE-2026-60629: Oracle JDeveloper data access vulnerability in Data Visualization Tools](https://junglewise.ai/threats/cve-2026-60629-oracle-jdeveloper-data-access-vulnerability-in-data-visualization) (high, CVSS 7.5, published 21 Jul 2026) - [CVE-2026-60622: Oracle JDeveloper information disclosure in Security Framework](https://junglewise.ai/threats/cve-2026-60622-oracle-jdeveloper-information-disclosure-in-security-framework) (high, CVSS 7.5, published 21 Jul 2026) - [CVE-2026-60354: Oracle JDeveloper information disclosure in Data Visualization Tools](https://junglewise.ai/threats/cve-2026-60354-oracle-jdeveloper-information-disclosure-in-data-visualization) (low, CVSS 3.7, published 21 Jul 2026) - [CVE-2026-60353: Oracle JDeveloper information disclosure in ADF Faces](https://junglewise.ai/threats/cve-2026-60353-oracle-jdeveloper-information-disclosure-in-adf-faces) (low, CVSS 3.1, published 21 Jul 2026) - [CVE-2026-60352: Oracle JDeveloper information disclosure in ADF Faces](https://junglewise.ai/threats/cve-2026-60352-oracle-jdeveloper-information-disclosure-in-adf-faces) (low, CVSS 3.7, published 21 Jul 2026) - [CVE-2026-60351: Oracle JDeveloper unauthorized data access in ADF Faces](https://junglewise.ai/threats/cve-2026-60351-oracle-jdeveloper-unauthorized-data-access-in-adf-faces) (medium, CVSS 4.8, published 21 Jul 2026) - [CVE-2026-60350: Oracle JDeveloper information disclosure in ADF Faces](https://junglewise.ai/threats/cve-2026-60350-oracle-jdeveloper-information-disclosure-in-adf-faces) (medium, CVSS 6.5, published 21 Jul 2026) - [CVE-2026-60349: Oracle JDeveloper information disclosure in Java Business Objects](https://junglewise.ai/threats/cve-2026-60349-oracle-jdeveloper-information-disclosure-in-java-business-objects) (medium, CVSS 5.9, published 21 Jul 2026) - [CVE-2026-60348: Oracle JDeveloper information disclosure in ADF Faces](https://junglewise.ai/threats/cve-2026-60348-oracle-jdeveloper-information-disclosure-in-adf-faces) (medium, CVSS 5.9, published 21 Jul 2026) - [CVE-2026-60345: Oracle JDeveloper takeover in ADF Shared Components](https://junglewise.ai/threats/cve-2026-60345-oracle-jdeveloper-takeover-in-adf-shared-components) (high, CVSS 7.2, published 21 Jul 2026) - [CVE-2022-21445: Oracle ADF Faces Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2022-21445-oracle-adf-faces-deserialization-of-untrusted-data-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 18 Sep 2024) - [CVE-2017-3255: Oracle JDeveloper information disclosure in ADF Faces](https://junglewise.ai/threats/cve-2017-3255-oracle-jdeveloper-information-disclosure-in-adf-faces) (medium, CVSS 5.8, published 27 Jan 2017) ## Most severe Oracle JDeveloper vulnerabilities - [CVE-2022-21445: Oracle ADF Faces Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2022-21445-oracle-adf-faces-deserialization-of-untrusted-data-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 18 Sep 2024) - [CVE-2026-73961: Oracle JDeveloper remote code execution in ADF Faces](https://junglewise.ai/threats/cve-2026-73961-oracle-jdeveloper-remote-code-execution-in-adf-faces) (critical, CVSS 9.8, published 15 Sep 2026) - [CVE-2026-83423: Oracle JDeveloper authentication bypass in Security Framework](https://junglewise.ai/threats/cve-2026-83423-oracle-jdeveloper-authentication-bypass-in-security-framework) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-83306: Oracle JDeveloper privilege escalation in Resource Catalog Services](https://junglewise.ai/threats/cve-2026-83306-oracle-jdeveloper-privilege-escalation-in-resource-catalog) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-83266: Oracle JDeveloper authentication bypass in Resource Catalog Services](https://junglewise.ai/threats/cve-2026-83266-oracle-jdeveloper-authentication-bypass-in-resource-catalog) (high, CVSS 8.2, published 15 Sep 2026) - [CVE-2026-83067: Oracle JDeveloper data manipulation and denial of service in ADF Shared Components](https://junglewise.ai/threats/cve-2026-83067-oracle-jdeveloper-data-manipulation-and-denial-of-service-in-adf) (high, CVSS 8.1, published 15 Sep 2026) - [CVE-2026-83424: Oracle JDeveloper unauthorized information disclosure](https://junglewise.ai/threats/cve-2026-83424-oracle-jdeveloper-unauthorized-information-disclosure) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-60629: Oracle JDeveloper data access vulnerability in Data Visualization Tools](https://junglewise.ai/threats/cve-2026-60629-oracle-jdeveloper-data-access-vulnerability-in-data-visualization) (high, CVSS 7.5, published 21 Jul 2026) - [CVE-2026-60622: Oracle JDeveloper information disclosure in Security Framework](https://junglewise.ai/threats/cve-2026-60622-oracle-jdeveloper-information-disclosure-in-security-framework) (high, CVSS 7.5, published 21 Jul 2026) - [CVE-2026-60345: Oracle JDeveloper takeover in ADF Shared Components](https://junglewise.ai/threats/cve-2026-60345-oracle-jdeveloper-takeover-in-adf-shared-components) (high, CVSS 7.2, published 21 Jul 2026) ## Vulnerabilities per week 5 vulnerabilities in the last four weeks, down 17% on the four before (6). 0 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 6 | 1 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 5 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Oracle technologies - [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server): 163 vulnerabilities - [Oracle Hyperion Financial Management](https://junglewise.ai/threats/technologies/hyperion-financial-management): 142 vulnerabilities - [Oracle Helidon](https://junglewise.ai/threats/technologies/helidon): 130 vulnerabilities - [Oracle MySQL Cluster](https://junglewise.ai/threats/technologies/mysql-cluster): 129 vulnerabilities - [Oracle Coherence](https://junglewise.ai/threats/technologies/coherence): 113 vulnerabilities - [Oracle E-Business Suite](https://junglewise.ai/threats/technologies/e-business-suite): 110 vulnerabilities - [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content): 110 vulnerabilities - [Oracle Commerce Guided Search](https://junglewise.ai/threats/technologies/commerce-guided-search): 104 vulnerabilities - [Oracle Commerce Experience Manager](https://junglewise.ai/threats/technologies/commerce-experience-manager): 102 vulnerabilities - [Oracle JD Edwards EnterpriseOne Tools](https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools): 101 vulnerabilities - [Oracle PeopleSoft Enterprise PeopleTools](https://junglewise.ai/threats/technologies/peopletools): 101 vulnerabilities - [Oracle Java SE](https://junglewise.ai/threats/technologies/java-se): 92 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oracle JDeveloper vulnerabilities", https://junglewise.ai/threats/technologies/jdeveloper, 9 November 2026.