| Package | Affected versions | Patched versions |
|---|---|---|
| jdeveloper | = 10.1.2= 9.0.4= 9.0.5 |
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free