Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading to unauthenticated remote code execution.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CWE-502