initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
No history.
Information
Published : 2019-07-26 19:15
Updated : 2024-11-21 04:25
NVD link : CVE-2019-13990
Mitre link : CVE-2019-13990
CVE.ORG link : CVE-2019-13990
JSON object : View
Products Affected
oracle
- retail_central_office
- retail_returns_management
- retail_back_office
- flexcube_private_banking
- google_guava_mapviewer
- banking_enterprise_product_manufacturing
- primavera_unifier
- customer_management_and_segmentation_foundation
- enterprise_manager_base_platform
- enterprise_manager_ops_center
- terracotta_quartz_scheduler_mapviewer
- retail_order_broker
- hyperion_infrastructure_technology
- retail_point-of-service
- banking_payments
- webcenter_sites
- communications_ip_service_activator
- retail_integration_bus
- communications_session_route_manager
- flexcube_investor_servicing
- retail_xstore_point_of_service
- documaker
- apache_batik_mapviewer
- banking_enterprise_originations
- jd_edwards_enterpriseone_orchestrator
- fusion_middleware_mapviewer
netapp
- cloud_secure_agent
- active_iq_unified_manager
softwareag
- quartz
atlassian
- jira_service_management
apache
- tomee
CWE
CWE-611
Improper Restriction of XML External Entity Reference