VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 16, 2019· Updated Jun 17, 2026

CVE-2019-2904

CVE-2019-2904

Description

Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper and ADF. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

52
  • Oracle Corporation/Application Testing Suite4 versions
    cpe:2.3:a:oracle:application_testing_suite:12.5.0.3:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:oracle:application_testing_suite:12.5.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_testing_suite:13.1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_testing_suite:13.2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*
  • Oracle Corporation/Banking Enterprise Collections2 versions
    cpe:2.3:a:oracle:banking_enterprise_collections:2.7.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:banking_enterprise_collections:2.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_enterprise_collections:2.8.0:*:*:*:*:*:*:*
  • Oracle Corporation/Banking Enterprise Originations2 versions
    cpe:2.3:a:oracle:banking_enterprise_originations:2.7.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:banking_enterprise_originations:2.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_enterprise_originations:2.8.0:*:*:*:*:*:*:*
  • Oracle Corporation/Banking Enterprise Product Manufacturing2 versions
    cpe:2.3:a:oracle:banking_enterprise_product_manufacturing:2.7.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:banking_enterprise_product_manufacturing:2.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_enterprise_product_manufacturing:2.8.0:*:*:*:*:*:*:*
  • Oracle Corporation/Banking Platform9 versions
    cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_platform:2.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_platform:2.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_platform:2.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:*
  • Oracle Corporation/Business Process Management Suite2 versions
    cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:*
  • Oracle Corporation/Clinical
    cpe:2.3:a:oracle:clinical:5.2:*:*:*:*:*:*:*
  • Oracle Corporation/Communications Diameter Signaling Router
    cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*
    Range: >=8.0.0.0,<=8.4.0.5
  • Oracle Corporation/Communications Network Integrity
    cpe:2.3:a:oracle:communications_network_integrity:*:*:*:*:*:*:*:*
    Range: >=7.3.2,<=7.3.6
  • Oracle Corporation/Communications Service Broker2 versions
    cpe:2.3:a:oracle:communications_service_broker:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:communications_service_broker:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_service_broker:6.1:*:*:*:*:*:*:*
  • Oracle Corporation/Communications Services Gatekeeper2 versions
    cpe:2.3:a:oracle:communications_services_gatekeeper:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:communications_services_gatekeeper:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:communications_services_gatekeeper:6.1:*:*:*:*:*:*:*
  • Oracle Corporation/Enterprise Repository2 versions
    cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0:*:*:*:*:*:*:*
    • (no CPE)range: 11.1.1.7.0
  • Oracle Corporation/Financial Services Lending And Leasing2 versions
    cpe:2.3:a:oracle:financial_services_lending_and_leasing:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:financial_services_lending_and_leasing:*:*:*:*:*:*:*:*range: >=14.1.0,<=14.2.0
    • cpe:2.3:a:oracle:financial_services_lending_and_leasing:12.5.0:*:*:*:*:*:*:*
  • Oracle Corporation/Financial Services Revenue Management And Billing Analytics3 versions
    cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.6:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.8:*:*:*:*:*:*:*
  • Oracle Corporation/Flexcube Private Banking2 versions
    cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*
  • Oracle Corporation/Health Sciences Data Management Workbench2 versions
    cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.5:*:*:*:*:*:*:*
  • Oracle Corporation/Hyperion Planning
    cpe:2.3:a:oracle:hyperion_planning:11.1.2.4:*:*:*:*:*:*:*
  • Oracle Corporation/Rapid Planning2 versions
    cpe:2.3:a:oracle:rapid_planning:12.1.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:rapid_planning:12.1.3:*:*:*:*:*:*:*
    • (no CPE)range: 12.1.3
  • Oracle Corporation/Retail Assortment Planning2 versions
    cpe:2.3:a:oracle:retail_assortment_planning:15.0.3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:retail_assortment_planning:15.0.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_assortment_planning:16.0.3.0:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Clearance Optimization Engine3 versions
    cpe:2.3:a:oracle:retail_clearance_optimization_engine:13.4:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:retail_clearance_optimization_engine:13.4:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_clearance_optimization_engine:14.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_clearance_optimization_engine:14.0.5:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Markdown Optimization
    cpe:2.3:a:oracle:retail_markdown_optimization:13.4:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Sales Audit2 versions
    cpe:2.3:a:oracle:retail_sales_audit:15.0.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:retail_sales_audit:15.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_sales_audit:16.0.2:*:*:*:*:*:*:*
  • Oracle Corporation/Jdeveloper And Adfllm-create
    Range: 11.1.1.9.0, 12.1.3.0.0, 12.2.1.3.0
  • Oracle Corporation/Fusion Middlewarellm-fuzzy
    Range: 11.1.1.9.0, 12.1.3.0.0, 12.2.1.3.0

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.