Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle Jdeveloper 信息泄露漏洞
Vulnerability Description
Oracle Jdeveloper是美国甲骨文(Oracle)公司的一套免费的集成开发环境(IDE),它可简化基于Java的SOA和Java EE应用程序开发,并支持整个开发生命周期。 Oracle JDeveloper 9.0.4、9.0.5和10.1.2中存在信息泄露漏洞。 在启动sqlplus时,JDeveloper会将明文密码作为参数传递,这可让本地用户获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A