Unrated severityNVD Advisory· Published Jul 18, 2005· Updated Apr 16, 2026
CVE-2005-2291
CVE-2005-2291
Description
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information.
Affected products
3cpe:2.3:a:oracle:jdeveloper:10.1.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:oracle:jdeveloper:10.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdeveloper:9.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdeveloper:9.0.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.red-database-security.com/advisory/oracle_jdeveloper_passes_plaintext_password.htmlnvdPatchVendor Advisory
- marc.infonvd
News mentions
0No linked articles in our index yet.