Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
Oracle · ADF Faces
Date added (CISA)
2024-09-18
Remediation due
2024-10-09
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading to unauthenticated remote code execution.