CVE-2005-2292

Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information.

• http://marc.info/?l=bugtraq&m=112129177927502&w=2
• http://secunia.com/advisories/15991/Patch, Vendor Advisory
• http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.htmlPatch, Vendor Advisory
• http://www.red-database-security.com/advisory/oracle_jdeveloper_plaintext_password.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21342
• http://marc.info/?l=bugtraq&m=112129177927502&w=2
• http://secunia.com/advisories/15991/Patch, Vendor Advisory
• http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.htmlPatch, Vendor Advisory
• http://www.red-database-security.com/advisory/oracle_jdeveloper_plaintext_password.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21342

Published

Jul 18, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2286WebEOC before 6.0.2 does not properly check user authorizati…
• CVE-2005-2287SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to…
• CVE-2005-2288Cross-site scripting (XSS) vulnerability in PHPCounter 7.2 a…
• CVE-2005-2289PHPCounter 7.2 allows remote attackers to obtain sensitive i…
• CVE-2005-2290wps_shop.cgi in WPS Web Portal System 0.7.0 allows remote at…
• CVE-2005-2291Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleart…
• CVE-2005-2293Oracle Formsbuilder 9.0.4 stores database usernames and pass…5.5
• CVE-2005-2294Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large numb…
• CVE-2005-2295NetPanzer 0.8 and earlier allows remote attackers to cause a…
• CVE-2005-2296YabbSE 1.5.5c allows remote attackers to obtain sensitive in…
• CVE-2005-2297Stack-based buffer overflow in TreeAction.do in Sybase EASer…
• CVE-2005-2298BitDefender Engine 1.6.1 and earlier does not properly scan …