initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
No history.
Information
Published : 2019-07-26 19:15
Updated : 2023-12-22 16:35
NVD link : CVE-2019-13990
Mitre link : CVE-2019-13990
CVE.ORG link : CVE-2019-13990
JSON object : View
Products Affected
oracle
- retail_xstore_point_of_service
- retail_integration_bus
- banking_enterprise_product_manufacturing
- google_guava_mapviewer
- webcenter_sites
- terracotta_quartz_scheduler_mapviewer
- communications_session_route_manager
- documaker
- banking_enterprise_originations
- communications_ip_service_activator
- jd_edwards_enterpriseone_orchestrator
- retail_order_broker
- retail_returns_management
- retail_central_office
- banking_payments
- fusion_middleware_mapviewer
- enterprise_manager_ops_center
- retail_back_office
- enterprise_manager_base_platform
- retail_point-of-service
- customer_management_and_segmentation_foundation
- apache_batik_mapviewer
- flexcube_investor_servicing
- flexcube_private_banking
- hyperion_infrastructure_technology
- primavera_unifier
netapp
- active_iq_unified_manager
- cloud_secure_agent
softwareag
- quartz
atlassian
- jira_service_management
apache
- tomee
CWE
CWE-611
Improper Restriction of XML External Entity Reference
