CVE-2019-2904

—

CVSS 3.1

9.8 critical

EPSS

14%p96

Published

Oct 16, 2019 (Oct 16, 2019)

Modified

Jun 17, 2026

Description

Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper and ADF. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Vendors: oracle
Products: application testing suite, banking enterprise collections, banking enterprise originations, banking enterprise product manufacturing, banking platform, business process management suite, clinical, communications diameter signaling router, communications network integrity, communications service broker, communications services gatekeeper, enterprise repository
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (14.3%)

In the news0 stories

No ingested article mentions this CVE yet.