PatchTheCVEjdeveloper vulnerabilities and fixes
Recent CVEs affecting jdeveloper, with upgrade or downgrade steps. 11 tracked.
jdeveloper has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-07-21. Highest priority: CVE-2026-60622 (score 40/100).
- CVE-2026-60622 HIGH 7.5 DOWNGRADE Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework)
- CVE-2026-60629 HIGH 7.5 DOWNGRADE Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualization Tool
- CVE-2026-60345 HIGH 7.2 DOWNGRADE Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components)
- CVE-2026-60348 MEDIUM 5.9 DOWNGRADE Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)
- CVE-2026-60349 MEDIUM 5.9 DOWNGRADE Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business Objects)
- CVE-2026-60351 MEDIUM 4.8 DOWNGRADE Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)
- CVE-2026-60350 MEDIUM 6.5 DOWNGRADE Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)
- CVE-2026-60352 LOW 3.7 DOWNGRADE Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)
- CVE-2026-60354 LOW 3.7 DOWNGRADE Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualization Tool
- CVE-2026-60353 LOW 3.1 DOWNGRADE Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)
- CVE-2026-61061 HIGH 7.0 DOWNGRADE Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework)
FAQ
How do I fix jdeveloper vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jdeveloper being exploited right now?
None of the tracked jdeveloper CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jdeveloper CVE should I patch first?
CVE-2026-60622 currently ranks highest (40/100): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework).