| Package | Affected versions | Patched versions |
|---|---|---|
| pl/sql developer | = 11.0= 11.0.1= 11.0.2= 11.0.3= 11.0.4= 11.0.5 |
Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free