CVE-2005-2292: Oracle Jdeveloper

Low severity, CVSS 2.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information.

Affected products

• Oracle Jdeveloper: version 9.0.4 only; version 9.0.5 only; version 10.1.2 only

Published 2005-07-18. Last modified 2026-06-16.