Unrated severityNVD Advisory· Published Jul 18, 2005· Updated Jun 16, 2026
CVE-2005-2291
CVE-2005-2291
Description
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:oracle:jdeveloper:10.1.2:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:oracle:jdeveloper:10.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdeveloper:9.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdeveloper:9.0.5:*:*:*:*:*:*:*
- (no CPE)range: 9.0.4, 9.0.5, 10.1.2
Patches
Vulnerability mechanics
References
2- www.red-database-security.com/advisory/oracle_jdeveloper_passes_plaintext_password.htmlnvdPatchVendor Advisory
- marc.infonvd
News mentions
0No linked articles in our index yet.