CVE-2019-10219

EPSS 2.17%
Veröffentlicht 08.11.2019 15:15:11
Zuletzt bearbeitet 25.08.2026 16:28:27
Erkennungen
Login

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 22

NVD 420 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Hibernate Validator Version < 6.0.18

Redhat ≫ Hibernate Validator Version 6.1.0 Update alpha1

Redhat ≫ Hibernate Validator Version 6.1.0 Update alpha2

Redhat ≫ Hibernate Validator Version 6.1.0 Update alpha3

Redhat ≫ Hibernate Validator Version 6.1.0 Update alpha4

Redhat ≫ Hibernate Validator Version 6.1.0 Update alpha5

Redhat ≫ Hibernate Validator Version 6.1.0 Update alpha6

Redhat ≫ Fuse Version 1.0

Redhat ≫ Jboss Data Grid Version - SwEdition text-only

Redhat ≫ Jboss Enterprise Application Platform Version - SwEdition text-only

Redhat ≫ Openshift Application Runtimes Version - SwEdition text-only

Redhat ≫ Single Sign-on Version - SwEdition text-only

Redhat ≫ Jboss Enterprise Application Platform Version 7.2

Redhat ≫ Enterprise Linux Version 6.0

Redhat ≫ Jboss Enterprise Application Platform Version 7.3

Redhat ≫ Enterprise Linux Version 6.0

Netapp ≫ Active Iq Unified Manager Version - SwPlatform linux

Netapp ≫ Active Iq Unified Manager Version - SwPlatform vmware_vsphere

Netapp ≫ Active Iq Unified Manager Version - SwPlatform windows

Netapp ≫ Management Services For Element Software And Netapp Hci Version -

Netapp ≫ Snapcenter Plug-in Version - SwPlatform vmware_vsphere

Netapp ≫ Element Version - SwPlatform vcenter_server

Oracle ≫ Access Manager Version 11.1.2.3.0

Oracle ≫ Access Manager Version 12.2.1.3.0

Oracle ≫ Access Manager Version 12.2.1.4.0

Oracle ≫ Agile Engineering Data Management Version 6.2.1.0

Oracle ≫ Agile Product Lifecycle Analytics Version 3.6.1

Oracle ≫ Agile Product Lifecycle Management Version 9.3.3

Oracle ≫ Agile Product Lifecycle Management Version 9.3.6

Oracle ≫ Agile Product Lifecycle Management Integration Pack Version 3.6 SwPlatform e-business_suite

Oracle ≫ Airlines Data Model Version 12.1.1.0.0

Oracle ≫ Airlines Data Model Version 12.2.0.1.0

Oracle ≫ Application Express Version 21.1.4

Oracle ≫ Application Performance Management Version 13.4.1.0

Oracle ≫ Application Performance Management Version 13.5.1.0

Oracle ≫ Application Testing Suite Version 13.3.0.1

Oracle ≫ Argus Analytics Version 8.2.1

Oracle ≫ Argus Analytics Version 8.2.2

Oracle ≫ Argus Analytics Version 8.2.3

Oracle ≫ Argus Analytics Version 8.21

Oracle ≫ Argus Insight Version 8.2.1

Oracle ≫ Argus Insight Version 8.2.2

Oracle ≫ Argus Insight Version 8.2.3

Oracle ≫ Argus Safety Version 8.2.1

Oracle ≫ Argus Safety Version 8.2.2

Oracle ≫ Argus Safety Version 8.2.3

Oracle ≫ Banking Apis Version 18.1

Oracle ≫ Banking Apis Version 18.2

Oracle ≫ Banking Apis Version 18.3

Oracle ≫ Banking Apis Version 19.1

Oracle ≫ Banking Apis Version 19.2

Oracle ≫ Banking Apis Version 20.1

Oracle ≫ Banking Apis Version 21.1

Oracle ≫ Banking Deposits And Lines Of Credit Servicing Version 2.12.0

Oracle ≫ Banking Digital Experience Version 17.2

Oracle ≫ Banking Digital Experience Version 18.1

Oracle ≫ Banking Digital Experience Version 18.3

Oracle ≫ Banking Digital Experience Version 19.1

Oracle ≫ Banking Digital Experience Version 19.2

Oracle ≫ Banking Digital Experience Version 20.1

Oracle ≫ Banking Digital Experience Version 21.1

Oracle ≫ Banking Enterprise Default Management Version 2.6.2

Oracle ≫ Banking Enterprise Default Management Version 2.7.0

Oracle ≫ Banking Enterprise Default Management Version 2.7.1

Oracle ≫ Banking Enterprise Default Management Version 2.10.0

Oracle ≫ Banking Enterprise Default Management Version 2.12.0

Oracle ≫ Banking Enterprise Default Managment Version >= 2.3.0 <= 2.4.0

Oracle ≫ Banking Loans Servicing Version 2.12.0

Oracle ≫ Banking Party Management Version 2.7.0

Oracle ≫ Banking Platform Version >= 2.3.0 <= 2.4.1

Oracle ≫ Banking Platform Version 2.6.2

Oracle ≫ Banking Platform Version 2.7.0

Oracle ≫ Banking Platform Version 2.7.1

Oracle ≫ Bi Publisher Version 5.5.0.0.0

Oracle ≫ Bi Publisher Version 11.1.1.9.0

Oracle ≫ Bi Publisher Version 12.2.1.3.0

Oracle ≫ Bi Publisher Version 12.2.1.4.0

Oracle ≫ Big Data Spatial And Graph Version 23.1

Oracle ≫ Business Activity Monitoring Version 12.2.1.4.0

Oracle ≫ Business Intelligence Version 5.5.0.0.0 SwEdition enterprise

Oracle ≫ Business Intelligence Version 5.9.0.0.0 SwEdition enterprise

Oracle ≫ Business Intelligence Version 12.2.1.3.0 SwEdition enterprise

Oracle ≫ Business Intelligence Version 12.2.1.4.0 SwEdition enterprise

Oracle ≫ Business Process Management Suite Version 12.2.1.3.0

Oracle ≫ Business Process Management Suite Version 12.2.1.4.0

Oracle ≫ Clinical Version 5.2.1

Oracle ≫ Clinical Version 5.2.2

Oracle ≫ Commerce Guided Search Version 11.3.2

Oracle ≫ Commerce Platform Version >= 11.3.0 <= 11.3.2

Oracle ≫ Communications Application Session Controller Version 3.9.0

Oracle ≫ Communications Billing And Revenue Management Version 12.0.0.3

Oracle ≫ Communications Billing And Revenue Management Version 12.0.0.4

Oracle ≫ Communications Billing And Revenue Management Elastic Charging Engine Version 11.3

Oracle ≫ Communications Billing And Revenue Management Elastic Charging Engine Version 12.0

Oracle ≫ Communications Calendar Server Version 8.0.0.5.0

Oracle ≫ Communications Calendar Server Version 8.0.0.6.0

Oracle ≫ Communications Cloud Native Core Automated Test Suite Version 1.8.0

Oracle ≫ Communications Cloud Native Core Binding Support Function Version 1.9.0

Oracle ≫ Communications Cloud Native Core Binding Support Function Version 1.10.0

Oracle ≫ Communications Cloud Native Core Console Version 1.7.0

Oracle ≫ Communications Cloud Native Core Network Function Cloud Native Environment Version 1.9.0

Oracle ≫ Communications Cloud Native Core Network Repository Function Version 1.14.0

Oracle ≫ Communications Cloud Native Core Policy Version 1.14.0

Oracle ≫ Communications Cloud Native Core Security Edge Protection Proxy Version 1.5.0

Oracle ≫ Communications Cloud Native Core Security Edge Protection Proxy Version 1.6.0

Oracle ≫ Communications Cloud Native Core Security Edge Protection Proxy Version 1.15.0

Oracle ≫ Communications Cloud Native Core Service Communication Proxy Version 1.14.0

Oracle ≫ Communications Cloud Native Core Unified Data Repository Version 1.14.0

Oracle ≫ Communications Contacts Server Version 8.0.0.3.0

Oracle ≫ Communications Converged Application Server - Service Controller Version 6.2

Oracle ≫ Communications Convergence Version 3.0.2.2.0

Oracle ≫ Communications Convergent Charging Controller Version >= 12.0.1.0.0 <= 12.0.4.0.0

Oracle ≫ Communications Convergent Charging Controller Version 6.0.1.0.0

Oracle ≫ Communications Data Model Version 11.3.2.1.0

Oracle ≫ Communications Data Model Version 11.3.2.2.0

Oracle ≫ Communications Data Model Version 11.3.2.3.0

Oracle ≫ Communications Data Model Version 12.1.0.1.0

Oracle ≫ Communications Data Model Version 12.1.2.0.0

Oracle ≫ Communications Design Studio Version 7.3.4

Oracle ≫ Communications Design Studio Version 7.3.5

Oracle ≫ Communications Design Studio Version 7.4.0

Oracle ≫ Communications Design Studio Version 7.4.1

Oracle ≫ Communications Design Studio Version 7.4.2

Oracle ≫ Communications Diameter Signaling Route Version >= 8.0.0.0 <= 8.5.1.0

Oracle ≫ Communications Eagle Application Processor Version >= 16.1 <= 16.4

Oracle ≫ Communications Instant Messaging Server Version 10.0.1.5.0

Oracle ≫ Communications Interactive Session Recorder Version 6.3

Oracle ≫ Communications Interactive Session Recorder Version 6.4

Oracle ≫ Communications Messaging Server Version 8.1

Oracle ≫ Communications Metasolv Solution Version 6.3.1

Oracle ≫ Communications Network Charging And Control Version >= 12.0.1.0.0 <= 12.0.4.0.0

Oracle ≫ Communications Network Charging And Control Version 6.0.1.0.0

Oracle ≫ Communications Network Integrity Version 7.3.5

Oracle ≫ Communications Network Integrity Version 7.3.6

Oracle ≫ Communications Offline Mediation Controller Version 12.0.0.3

Oracle ≫ Communications Operations Monitor Version 3.4

Oracle ≫ Communications Operations Monitor Version 4.2

Oracle ≫ Communications Operations Monitor Version 4.3

Oracle ≫ Communications Operations Monitor Version 4.4

Oracle ≫ Communications Operations Monitor Version 5.0

Oracle ≫ Communications Pricing Design Center Version 12.0.0.3.0

Oracle ≫ Communications Pricing Design Center Version 12.0.0.4.0

Oracle ≫ Communications Service Broker Version 6.2

Oracle ≫ Communications Services Gatekeeper Version 7.0

Oracle ≫ Communications Session Border Controller Version 8.2

Oracle ≫ Communications Session Border Controller Version 8.3

Oracle ≫ Communications Session Border Controller Version 8.4

Oracle ≫ Communications Session Border Controller Version 9.0

Oracle ≫ Communications Unified Inventory Management Version 7.3.0

Oracle ≫ Communications Unified Inventory Management Version 7.3.4

Oracle ≫ Communications Unified Inventory Management Version 7.3.5

Oracle ≫ Communications Unified Inventory Management Version 7.4.0

Oracle ≫ Communications Unified Inventory Management Version 7.4.1

Oracle ≫ Communications Unified Inventory Management Version 7.4.2

Oracle ≫ Communications Unified Inventory Management Version 7.5.0

Oracle ≫ Communications Webrtc Session Controller Version 7.2.0

Oracle ≫ Communications Webrtc Session Controller Version 7.2.1

Oracle ≫ Data Integrator Version 12.2.1.3.0

Oracle ≫ Data Integrator Version 12.2.1.4.0

Oracle ≫ Database Server Version 12.1.0.1

Oracle ≫ Database Server Version 12.1.0.2

Oracle ≫ Database Server Version 19c

Oracle ≫ Database Server Version 21c

Oracle ≫ Demantra Demand Management Version >= 12.2.6 <= 12.2.11

Oracle ≫ Documaker Version >= 12.6.0 <= 12.6.4

Oracle ≫ E-business Suite Version >= 12.2.3 <= 12.2.11

Oracle ≫ Enterprise Communications Broker Version 3.3

Oracle ≫ Enterprise Data Quality Version 12.2.1.3.0

Oracle ≫ Enterprise Data Quality Version 12.2.1.4.0

Oracle ≫ Enterprise Manager Base Platform Version 13.4.0.0

Oracle ≫ Enterprise Manager Base Platform Version 13.5.0.0

Oracle ≫ Enterprise Manager Ops Center Version 12.4.0.0

Oracle ≫ Enterprise Session Border Controller Version 8.4

Oracle ≫ Enterprise Session Border Controller Version 9.0

Oracle ≫ Essbase Version < 11.1.2.4.47

Oracle ≫ Essbase Version >= 21.0 < 21.3

Oracle ≫ Essbase Version 11.1.2.4.47

Oracle ≫ Essbase Administration Services Version < 11.1.2.4.47

Oracle ≫ Essbase Administration Services Version 11.1.2.4.47

Oracle ≫ Financial Services Analytical Applications Infrastructure Version >= 8.0.7 <= 8.1.1

Oracle ≫ Financial Services Analytical Applications Infrastructure Version 7.3.3

Oracle ≫ Financial Services Behavior Detection Platform Version 8.0.7

Oracle ≫ Financial Services Behavior Detection Platform Version 8.0.8

Oracle ≫ Financial Services Behavior Detection Platform Version 8.0.11

Oracle ≫ Financial Services Enterprise Case Management Version 8.0.7

Oracle ≫ Financial Services Enterprise Case Management Version 8.0.8

Oracle ≫ Financial Services Enterprise Case Management Version 8.0.11

Oracle ≫ Financial Services Foreign Account Tax Compliance Act Management Version 8.0.7

Oracle ≫ Financial Services Foreign Account Tax Compliance Act Management Version 8.0.8

Oracle ≫ Financial Services Foreign Account Tax Compliance Act Management Version 8.0.11

Oracle ≫ Financial Services Model Management And Governance Version >= 8.0.8 <= 8.1.1

Oracle ≫ Financial Services Trade-based Anti Money Laundering Version 8.0.7 SwEdition enterprise

Oracle ≫ Financial Services Trade-based Anti Money Laundering Version 8.0.8 SwEdition enterprise

Oracle ≫ Flexcube Investor Servicing Version 12.0.4

Oracle ≫ Flexcube Investor Servicing Version 12.1.0

Oracle ≫ Flexcube Investor Servicing Version 12.3.0

Oracle ≫ Flexcube Investor Servicing Version 12.4.0

Oracle ≫ Flexcube Investor Servicing Version 14.4.0

Oracle ≫ Flexcube Investor Servicing Version 14.5.0

Oracle ≫ Flexcube Private Banking Version 12.0.0

Oracle ≫ Flexcube Private Banking Version 12.1.0

Oracle ≫ Fusion Middleware Version 12.2.1.3.0

Oracle ≫ Fusion Middleware Version 12.2.1.4.0

Oracle ≫ Fusion Middleware Mapviewer Version 12.2.1.4.0

Oracle ≫ Goldengate Version < 12.3.0.1

Oracle ≫ Goldengate Version >= 19.0.0 < 19.1.0.0.220118

Oracle ≫ Goldengate Version >= 21.0.0 < 21.5.0.0.220118

Oracle ≫ Goldengate Application Adapters Version 19.1.0.0.0

Oracle ≫ Graalvm Version 20.3.4 SwEdition enterprise

Oracle ≫ Graalvm Version 21.3.0 SwEdition enterprise

Oracle ≫ Graph Server And Client Version < 21.4

Oracle ≫ Health Sciences Clinical Development Analytics Version 4.0.1

Oracle ≫ Health Sciences Inform Crf Submit Version 6.2.1

Oracle ≫ Health Sciences Information Manager Version 3.0.2

Oracle ≫ Health Sciences Information Manager Version 3.0.3

Oracle ≫ Healthcare Data Repository Version 7.0.2

Oracle ≫ Healthcare Data Repository Version 8.1.0

Oracle ≫ Healthcare Data Repository Version 8.1.1

Oracle ≫ Healthcare Foundation Version >= 7.3.0.0 <= 7.3.0.2

Oracle ≫ Healthcare Foundation Version >= 8.0.0 <= 8.0.2

Oracle ≫ Healthcare Foundation Version 8.1.0

Oracle ≫ Healthcare Foundation Version 8.1.1

Oracle ≫ Healthcare Translational Research Version 4.1.0

Oracle ≫ Hospitality Cruise Shipboard Property Management System Version 20.1.0

Oracle ≫ Hospitality Opera 5 Property Services Version 5.6

Oracle ≫ Hospitality Reporting And Analytics Version 9.1.0

Oracle ≫ Hospitality Suite8 Version 8.10.2

Oracle ≫ Hospitality Suite8 Version 8.11.0

Oracle ≫ Hospitality Suite8 Version 8.12.0

Oracle ≫ Hospitality Suite8 Version 8.13.0

Oracle ≫ Hospitality Suite8 Version 8.14.0

Oracle ≫ HTTP Server Version 12.2.1.3.0

Oracle ≫ HTTP Server Version 12.2.1.4.0

Oracle ≫ Hyperion Financial Management Version 11.1.2.4

Oracle ≫ Hyperion Financial Management Version 11.2.6.0

Oracle ≫ Hyperion Ilearning Version 6.2

Oracle ≫ Hyperion Ilearning Version 6.3

Oracle ≫ Hyperion Infrastructure Technology Version 11.2.7.0

Oracle ≫ Instantis Enterprisetrack Version 17.1

Oracle ≫ Instantis Enterprisetrack Version 17.2

Oracle ≫ Instantis Enterprisetrack Version 17.3

Oracle ≫ Insurance Data Gateway Version 11.0.2

Oracle ≫ Insurance Data Gateway Version 11.1.0

Oracle ≫ Insurance Data Gateway Version 11.2.7

Oracle ≫ Insurance Data Gateway Version 11.3.0

Oracle ≫ Insurance Data Gateway Version 11.3.1

Oracle ≫ Insurance Insbridge Rating And Underwriting Version >= 5.4.0 <= 5.6.0

Oracle ≫ Insurance Insbridge Rating And Underwriting Version 5.2.0

Oracle ≫ Insurance Policy Administration Version 11.0.2

Oracle ≫ Insurance Policy Administration Version 11.1.0

Oracle ≫ Insurance Policy Administration Version 11.2.7

Oracle ≫ Insurance Policy Administration Version 11.3.0

Oracle ≫ Insurance Policy Administration Version 11.3.1

Oracle ≫ Insurance Policy Administration J2ee Version >= 11.1.0 <= 11.3.0

Oracle ≫ Insurance Policy Administration J2ee Version 10.2.0

Oracle ≫ Insurance Policy Administration J2ee Version 10.2.4

Oracle ≫ Insurance Policy Administration J2ee Version 11.0.2

Oracle ≫ Insurance Rules Palette Version >= 11.1.0 <= 11.3.0

Oracle ≫ Insurance Rules Palette Version 10.2.0

Oracle ≫ Insurance Rules Palette Version 10.2.4

Oracle ≫ Insurance Rules Palette Version 11.0.2

Oracle ≫ Insurance Rules Palette Version 11.3.1

Oracle ≫ Java Se Version 7u321

Oracle ≫ Java Se Version 8u311

Oracle ≫ Java Se Version 17.1

Oracle ≫ Jd Edwards Enterpriseone Orchestrator Version < 9.2.6.1

Oracle ≫ Jdk Version 11.0.13

Oracle ≫ Managed File Transfer Version 12.2.1.3.0

Oracle ≫ Managed File Transfer Version 12.2.1.4.0

Oracle ≫ Mysql Cluster Version < 7.4.34

Oracle ≫ Mysql Cluster Version >= 7.5.0 < 7.5.24

Oracle ≫ Mysql Cluster Version >= 7.6.0 < 7.6.20

Oracle ≫ Mysql Cluster Version >= 8.0.0 < 8.0.27

Oracle ≫ Mysql Connectors Version < 8.0.27

Oracle ≫ Mysql Connectors Version 8.0.27

Oracle ≫ Mysql Server Version < 5.7.36

Oracle ≫ Mysql Server Version >= 8.0.0 < 8.0.27

Oracle ≫ Mysql Server Version 5.7.36

Oracle ≫ Mysql Workbench Version < 8.0.27

Oracle ≫ Nosql Database Version < 21.1.12

Oracle ≫ Oss Support Tools Version < 2.12.42

Oracle ≫ Peoplesoft Enterprise Cs Sa Integration Pack Version 9.0

Oracle ≫ Peoplesoft Enterprise Cs Sa Integration Pack Version 9.2

Oracle ≫ Peoplesoft Enterprise Peopletools Version 8.57

Oracle ≫ Peoplesoft Enterprise Peopletools Version 8.58

Oracle ≫ Peoplesoft Enterprise Peopletools Version 8.59

Oracle ≫ Policy Automation Version >= 12.2.0 <= 12.2.24

Oracle ≫ Policy Automation Version 10.4.7

Oracle ≫ Primavera Analytics Version 18.8.3.3

Oracle ≫ Primavera Analytics Version 19.12.11.1

Oracle ≫ Primavera Analytics Version 20.12.12.0

Oracle ≫ Primavera Data Warehouse Version 18.8.3.3

Oracle ≫ Primavera Data Warehouse Version 19.12.11.1

Oracle ≫ Primavera Data Warehouse Version 20.12.12.0

Oracle ≫ Primavera Gateway Version >= 17.12.0 <= 17.12.11

Oracle ≫ Primavera Gateway Version >= 18.8.0 <= 18.8.13

Oracle ≫ Primavera Gateway Version >= 19.12.0 <= 19.12.12

Oracle ≫ Primavera Gateway Version >= 20.12.0 <= 20.12.7

Oracle ≫ Primavera Gateway Version 21.12.0

Oracle ≫ Primavera P6 Enterprise Project Portfolio Management Version >= 17.12.0.0 <= 17.12.0.0-17.12.20.0

Oracle ≫ Primavera P6 Enterprise Project Portfolio Management Version >= 18.8.0.0 <= 18.8.24.0

Oracle ≫ Primavera P6 Enterprise Project Portfolio Management Version >= 19.12.0.0 <= 19.12.18.0

Oracle ≫ Primavera P6 Enterprise Project Portfolio Management Version >= 20.12.0.0 <= 20.12.12.0

Oracle ≫ Primavera P6 Enterprise Project Portfolio Management Version 21.12.0.0

Oracle ≫ Primavera P6 Professional Project Management Version >= 17.12.0.0 <= 17.12.20.0

Oracle ≫ Primavera P6 Professional Project Management Version >= 18.8.0.0 <= 18.8.24.0

Oracle ≫ Primavera P6 Professional Project Management Version >= 19.12.0.0 <= 19.12.17.0

Oracle ≫ Primavera P6 Professional Project Management Version >= 20.12.0.0 <= 20.12.9.0

Oracle ≫ Primavera Portfolio Management Version >= 18.0.0.0 <= 18.0.3.0

Oracle ≫ Primavera Portfolio Management Version >= 19.0.0.0 <= 19.0.1.2

Oracle ≫ Primavera Portfolio Management Version 20.0.0.0

Oracle ≫ Primavera Portfolio Management Version 20.0.0.1

Oracle ≫ Primavera Unifier Version >= 17.7 <= 17.12

Oracle ≫ Primavera Unifier Version 18.8

Oracle ≫ Primavera Unifier Version 19.12

Oracle ≫ Primavera Unifier Version 20.12

Oracle ≫ Primavera Unifier Version 21.12

Oracle ≫ Rapid Planning Version >= 12.2.6 <= 12.2.11

Oracle ≫ Real-time Decision Server Version 3.2.0.0

Oracle ≫ Real User Experience Insight Version 13.4.1.0

Oracle ≫ Real User Experience Insight Version 13.5.1.0

Oracle ≫ Rest Data Services Version 21.2.4 SwEdition -

Oracle ≫ Retail Allocation Version 14.1.3.2

Oracle ≫ Retail Allocation Version 15.0.3.1

Oracle ≫ Retail Allocation Version 16.0.3

Oracle ≫ Retail Allocation Version 19.0.1

Oracle ≫ Retail Analytics Version >= 16.0.0 <= 16.0.2

Oracle ≫ Retail Assortment Planning Version 16.0.3

Oracle ≫ Retail Back Office Version 14.1

Oracle ≫ Retail Central Office Version 14.1

Oracle ≫ Retail Customer Insights Version >= 16.0.0 <= 16.0.2

Oracle ≫ Retail Customer Management And Segmentation Foundation Version >= 16.0 <= 19.0

Oracle ≫ Retail Eftlink Version 16.0.3

Oracle ≫ Retail Eftlink Version 17.0.2

Oracle ≫ Retail Eftlink Version 18.0.1

Oracle ≫ Retail Eftlink Version 19.0.1

Oracle ≫ Retail Eftlink Version 20.0.1

Oracle ≫ Retail Extract Transform And Load Version 13.2.8

Oracle ≫ Retail Financial Integration Version 14.1.3.2

Oracle ≫ Retail Financial Integration Version 15.0.3.1

Oracle ≫ Retail Financial Integration Version 16.0.3

Oracle ≫ Retail Financial Integration Version 19.0.1

Oracle ≫ Retail Fiscal Management Version 14.2

Oracle ≫ Retail Integration Bus Version >= 16.0.1 <= 16.0.3

Oracle ≫ Retail Integration Bus Version 13.0

Oracle ≫ Retail Integration Bus Version 14.1.3.0

Oracle ≫ Retail Integration Bus Version 14.1.3.2

Oracle ≫ Retail Integration Bus Version 15.0.3.1

Oracle ≫ Retail Integration Bus Version 19.0.0

Oracle ≫ Retail Integration Bus Version 19.0.1

Oracle ≫ Retail Invoice Matching Version 15.0.3

Oracle ≫ Retail Invoice Matching Version 16.0.3

Oracle ≫ Retail Merchandising System Version 19.0.1

Oracle ≫ Retail Order Broker Version 16.0

Oracle ≫ Retail Order Broker Version 18.0

Oracle ≫ Retail Order Broker Version 19.1

Oracle ≫ Retail Order Management System Version 19.5

Oracle ≫ Retail Point-of-sale Version 14.1

Oracle ≫ Retail Predictive Application Server Version 14.1.3

Oracle ≫ Retail Predictive Application Server Version 14.1.3.46

Oracle ≫ Retail Predictive Application Server Version 15.0.3

Oracle ≫ Retail Predictive Application Server Version 15.0.3.115

Oracle ≫ Retail Predictive Application Server Version 16.0.3

Oracle ≫ Retail Predictive Application Server Version 16.0.3.240

Oracle ≫ Retail Price Management Version 13.2

Oracle ≫ Retail Price Management Version 14.0.4

Oracle ≫ Retail Price Management Version 14.1

Oracle ≫ Retail Price Management Version 14.1.3

Oracle ≫ Retail Price Management Version 15.0

Oracle ≫ Retail Price Management Version 15.0.3

Oracle ≫ Retail Price Management Version 16.0

Oracle ≫ Retail Price Management Version 16.0.3

Oracle ≫ Retail Returns Management Version 14.1

Oracle ≫ Retail Service Backbone Version >= 16.0.1 <= 16.0.3

Oracle ≫ Retail Service Backbone Version 14.1.3.0

Oracle ≫ Retail Service Backbone Version 14.1.3.2

Oracle ≫ Retail Service Backbone Version 15.0.3.1

Oracle ≫ Retail Service Backbone Version 19.0.0

Oracle ≫ Retail Service Backbone Version 19.0.1

Oracle ≫ Retail Size Profile Optimization Version 16.0.3

Oracle ≫ Retail Xstore Point Of Service Version 17.0.4

Oracle ≫ Retail Xstore Point Of Service Version 18.0.3

Oracle ≫ Retail Xstore Point Of Service Version 19.0.2

Oracle ≫ Retail Xstore Point Of Service Version 20.0.1

Oracle ≫ Sd-wan Aware Version 8.2

Oracle ≫ Sd-wan Edge Version 9.0

Oracle ≫ Sd-wan Edge Version 9.1

Oracle ≫ Secure Backup Version 18.1.0.1.0

Oracle ≫ Siebel Applications Version < 21.12

Oracle ≫ Spatial Studio Version 21.2.1

Oracle ≫ Thesaurus Management System Version 5.2.3

Oracle ≫ Thesaurus Management System Version 5.3.0

Oracle ≫ Thesaurus Management System Version 5.3.1

Oracle ≫ Timesten In-memory Database Version < 11.2.2.8.27

Oracle ≫ Timesten In-memory Database Version >= 21.0.0 < 21.1.1.1.0

Oracle ≫ Utilities Framework Version >= 4.3.0.1.0 <= 4.3.0.6.0

Oracle ≫ Utilities Framework Version 4.2.0.2.0

Oracle ≫ Utilities Framework Version 4.2.0.3.0

Oracle ≫ Utilities Framework Version 4.4.0.0.0

Oracle ≫ Utilities Framework Version 4.4.0.2.0

Oracle ≫ Utilities Framework Version 4.4.0.3.0

Oracle ≫ Utilities Testing Accelerator Version 6.0.0.1.1

Oracle ≫ Utilities Testing Accelerator Version 6.0.0.2.2

Oracle ≫ Utilities Testing Accelerator Version 6.0.0.3.1

Oracle ≫ Vm Virtualbox Version < 6.1.32

Oracle ≫ Webcenter Portal Version 12.2.1.3.0

Oracle ≫ Webcenter Portal Version 12.2.1.4.0

Oracle ≫ Weblogic Server Version 12.1.3.0.0

Oracle ≫ Weblogic Server Version 12.2.1.3.0

Oracle ≫ Weblogic Server Version 12.2.1.4.0

Oracle ≫ Weblogic Server Version 14.1.1.0.0

Oracle ≫ Zfs Storage Appliance Kit Version 8.8

Oracle ≫ Zfs Storage Application Integration Engineering Software Version 1.3.3

Oracle ≫ Communications Messaging Server Version 8.1

Oracle ≫ Solaris Version 10

Oracle ≫ Solaris Version 11

Oracle ≫ Fujitsu M10-1 Firmware Version -

Oracle ≫ Fujitsu M10-1 Version -

Oracle ≫ Fujitsu M10-4 Firmware Version -

Oracle ≫ Fujitsu M10-4 Version -

Oracle ≫ Fujitsu M10-4s Firmware Version -

Oracle ≫ Fujitsu M10-4s Version -

Oracle ≫ Fujitsu M12-1 Firmware Version -

Oracle ≫ Fujitsu M12-1 Version -

Oracle ≫ Fujitsu M12-2 Firmware Version -

Oracle ≫ Fujitsu M12-2 Version -

Oracle ≫ Fujitsu M12-2s Firmware Version -

Oracle ≫ Fujitsu M12-2s Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.17%	0.799

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.1	2.8	2.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat	6.5	3.9	2.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://www.oracle.com/security-alerts/cpujan2022.html

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220210-0024/

Third Party Advisory

https://github.com/hibernate/hibernate-validator/commit/124b7dd6d9a4ad24d4d49f74701f05a13e56ceee

https://github.com/hibernate/hibernate-validator/commit/20d729548511ac5cff6fd459f93de137195420fe

https://github.com/hibernate/hibernate-validator/commit/124b7dd6d9a4ad24d4d49f74701f05a13e56cee

https://access.redhat.com/errata/RHSA-2020:0159

Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0160

Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0161

Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0164

Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0445

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10219

Third Party Advisory

Issue Tracking

https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Adapted/CVE-2019-10219

https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Origin/CVE-2019-10219/exploit

https://lists.apache.org/thread.html/r4f8b4e2541be4234946e40d55859273a7eec0f4901e8080ce2406fe6%40%3Cnotifications.accumulo.apache.org%3E

https://lists.apache.org/thread.html/r4f92d7f7682dcff92722fa947f9e6f8ba2227c5dc3e11ba09114897d%40%3Cnotifications.accumulo.apache.org%3E

https://lists.apache.org/thread.html/r87b7e2d22982b4ca9f88f5f4f22a19b394d2662415b233582ed22ebf%40%3Cnotifications.accumulo.apache.org%3E

https://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4%40%3Cpluto-scm.portals.apache.org%3E

https://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c%40%3Cpluto-dev.portals.apache.org%3E

https://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a%40%3Cpluto-dev.portals.apache.org%3E

https://nvd.nist.gov/vuln/detail/CVE-2019-10219

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-10219

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-10219

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-10219