initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
No history.
Information
Published : 2019-07-26 19:15
Updated : 2023-12-22 16:35
NVD link : CVE-2019-13990
Mitre link : CVE-2019-13990
CVE.ORG link : CVE-2019-13990
JSON object : View
Products Affected
oracle
- flexcube_private_banking
- fusion_middleware_mapviewer
- documaker
- primavera_unifier
- retail_central_office
- hyperion_infrastructure_technology
- terracotta_quartz_scheduler_mapviewer
- retail_returns_management
- banking_enterprise_originations
- apache_batik_mapviewer
- banking_payments
- google_guava_mapviewer
- retail_xstore_point_of_service
- retail_point-of-service
- jd_edwards_enterpriseone_orchestrator
- enterprise_manager_base_platform
- retail_order_broker
- communications_session_route_manager
- communications_ip_service_activator
- flexcube_investor_servicing
- enterprise_manager_ops_center
- webcenter_sites
- customer_management_and_segmentation_foundation
- retail_integration_bus
- retail_back_office
- banking_enterprise_product_manufacturing
netapp
- active_iq_unified_manager
- cloud_secure_agent
atlassian
- jira_service_management
apache
- tomee
softwareag
- quartz
CWE
CWE-611
Improper Restriction of XML External Entity Reference