initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Information
Published : 2019-07-26 19:15
Updated : 2023-12-22 16:35
NVD link : CVE-2019-13990
Mitre link : CVE-2019-13990
JSON object : View
Products Affected
oracle
- apache_batik_mapviewer
- retail_point-of-service
- hyperion_infrastructure_technology
- enterprise_manager_ops_center
- flexcube_private_banking
- google_guava_mapviewer
- terracotta_quartz_scheduler_mapviewer
- retail_returns_management
- banking_enterprise_originations
- enterprise_manager_base_platform
- retail_back_office
- jd_edwards_enterpriseone_orchestrator
- webcenter_sites
- retail_integration_bus
- retail_central_office
- flexcube_investor_servicing
- retail_xstore_point_of_service
- retail_order_broker
- banking_enterprise_product_manufacturing
- banking_payments
- communications_ip_service_activator
- customer_management_and_segmentation_foundation
- primavera_unifier
- fusion_middleware_mapviewer
- communications_session_route_manager
- documaker
atlassian
- jira_service_management
netapp
- cloud_secure_agent
- active_iq_unified_manager
softwareag
- quartz
apache
- tomee
CWE
CWE-611
Improper Restriction of XML External Entity Reference
