initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Information
Published : 2019-07-26 19:15
Updated : 2023-12-22 16:35
NVD link : CVE-2019-13990
Mitre link : CVE-2019-13990
JSON object : View
Products Affected
oracle
- customer_management_and_segmentation_foundation
- enterprise_manager_ops_center
- apache_batik_mapviewer
- terracotta_quartz_scheduler_mapviewer
- retail_order_broker
- retail_back_office
- webcenter_sites
- retail_xstore_point_of_service
- enterprise_manager_base_platform
- jd_edwards_enterpriseone_orchestrator
- retail_returns_management
- documaker
- flexcube_private_banking
- communications_session_route_manager
- primavera_unifier
- google_guava_mapviewer
- banking_enterprise_product_manufacturing
- retail_central_office
- retail_integration_bus
- banking_enterprise_originations
- retail_point-of-service
- flexcube_investor_servicing
- fusion_middleware_mapviewer
- banking_payments
- communications_ip_service_activator
- hyperion_infrastructure_technology
softwareag
- quartz
netapp
- active_iq_unified_manager
- cloud_secure_agent
apache
- tomee
atlassian
- jira_service_management
CWE
CWE-611
Improper Restriction of XML External Entity Reference
