Vulnerability Details : CVE-2019-13990
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.
Vulnerability category: XML external entity (XXE) injection
Products affected by CVE-2019-13990
- cpe:2.3:a:apache:tomee:7.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_integration_bus:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_integration_bus:16.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:documaker:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_investor_servicing:12.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_investor_servicing:14.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_investor_servicing:14.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_payments:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_order_broker:19.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_ip_service_activator:7.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:*
- Oracle » Communications Session Route ManagerVersions from including (>=) 8.2.0 and up to, including, (<=) 8.2.2cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_enterprise_originations:2.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_enterprise_originations:2.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_enterprise_product_manufacturing:2.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_enterprise_product_manufacturing:2.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:apache_batik_mapviewer:12.2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:apache_batik_mapviewer:18c:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:apache_batik_mapviewer:19c:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:google_guava_mapviewer:12.2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:google_guava_mapviewer:18c:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:google_guava_mapviewer:19c:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:terracotta_quartz_scheduler_mapviewer:12.2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:terracotta_quartz_scheduler_mapviewer:18c:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:terracotta_quartz_scheduler_mapviewer:19c:*:*:*:*:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.0:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.0:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.1:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.1:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.2:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.2:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.3:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.3:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.4:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.4:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.5:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.5:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.6:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.6:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.10:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.10:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.21.0:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.21.0:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.21.1:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.21.1:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.22.0:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.22.0:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.22.2:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.22.2:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.22.3:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.22.3:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.22.4:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.22.4:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.22.6:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.22.6:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.0.0:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.0.0:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.1.0:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.1.0:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.3.0:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.3.0:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.3.1:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.3.1:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.3.2:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.3.2:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.3.3:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.3.3:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.0:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.0:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.1:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.1:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.2:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.2:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.7:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.7:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.8:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.8:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.9:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.9:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.11:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.11:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.12:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.12:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.13:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.13:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.14:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.14:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.15:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.15:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.16:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.16:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.17:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.17:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.18:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.18:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.19:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.19:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.20:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.20:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.21:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.21:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.22:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.22:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.23:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.23:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.24:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.24:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.25:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.20.25:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.22.1:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:4.22.1:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.1.1:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.1.1:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.2.0:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.2.0:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.2.1:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.2.1:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.3:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.3:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.4:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.4:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.5:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.5:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.6:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.6:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.7:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.7:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.8:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.8:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.9:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.4.9:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.5.1:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.5.1:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.6.0:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.6.0:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.7.0:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.7.0:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.7.1:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.7.1:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.8.0:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.8.0:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.8.1:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.8.1:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.9.0:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.9.0:*:*:*:server:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.10.0:*:*:*:data_center:*:*:*
- cpe:2.3:a:atlassian:jira_service_management:5.10.0:*:*:*:server:*:*:*
- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*
- cpe:2.3:a:netapp:cloud_secure_agent:-:*:*:*:*:*:*:*
- cpe:2.3:a:softwareag:quartz:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-13990
0.63%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 79 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-13990
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST | |
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
134c704f-9b21-4f2e-91b3-4a467353bcc0 | 2024-10-15 |
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
CWE ids for CVE-2019-13990
-
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)
References for CVE-2019-13990
-
https://lists.apache.org/thread.html/f74b170d3d58d7a24db1afd3908bb0ab58a3900e16e73275674cdfaf%40%3Ccommits.tomee.apache.org%3E
svn commit: r1866633 - /tomee/deps/trunk/quartz-openejb-shade/pom.xml-Apache Mail ArchivesPatch
-
https://lists.apache.org/thread.html/r21df13c8bd2c2eae4b9661aae814c4a2a814d1f7875c765b8b115c9a%40%3Ccommits.tomee.apache.org%3E
[jira] [Assigned] (TOMEE-2886) Update quartz-scheduler to mitigate CVE-2019-13990-Apache Mail ArchivesPatch
-
https://lists.apache.org/thread.html/re9b56ac1934d7bf16afc83eac1c39c98c1b20b4b15891dce923bf8aa@%3Ccommits.tomee.apache.org%3E
[jira] [Created] (TOMEE-2886) Update quartz-scheduler to mitigate CVE-2019-13990 - Pony MailMailing List;Third Party Advisory
-
https://www.oracle.com/security-alerts/cpuoct2020.html
Oracle Critical Patch Update Advisory - October 2020Third Party Advisory
-
https://lists.apache.org/thread.html/r21df13c8bd2c2eae4b9661aae814c4a2a814d1f7875c765b8b115c9a@%3Ccommits.tomee.apache.org%3E
Pony Mail!Mailing List;Third Party Advisory
-
https://www.oracle.com/security-alerts/cpuapr2020.html
Oracle Critical Patch Update Advisory - April 2020Third Party Advisory
-
https://lists.apache.org/thread.html/r3a6884e8d819f32cde8c07b98934de3e80467859880f784950bf44cf@%3Ccommits.tomee.apache.org%3E
Pony Mail!Mailing List;Third Party Advisory
-
https://lists.apache.org/thread.html/6b6e3480b19856365fb5eef03aa0915a4679de4b019a1e975502d949%40%3Cdev.tomee.apache.org%3E
Re: Quartz CVE-2019-13990-Apache Mail ArchivesIssue Tracking
-
https://lists.apache.org/thread.html/f74b170d3d58d7a24db1afd3908bb0ab58a3900e16e73275674cdfaf@%3Ccommits.tomee.apache.org%3E
svn commit: r1866633 - /tomee/deps/trunk/quartz-openejb-shade/pom.xml - Pony MailMailing List;Patch;Third Party Advisory
-
https://lists.apache.org/thread.html/r3a6884e8d819f32cde8c07b98934de3e80467859880f784950bf44cf%40%3Ccommits.tomee.apache.org%3E
[jira] [Commented] (TOMEE-2886) Update quartz-scheduler to mitigate CVE-2019-13990-Apache Mail ArchivesIssue Tracking
-
https://www.oracle.com/security-alerts/cpujul2020.html
Oracle Critical Patch Update Advisory - July 2020Third Party Advisory
-
https://www.oracle.com//security-alerts/cpujul2021.html
Oracle Critical Patch Update Advisory - July 2021Third Party Advisory
-
https://lists.apache.org/thread.html/6b6e3480b19856365fb5eef03aa0915a4679de4b019a1e975502d949@%3Cdev.tomee.apache.org%3E
Re: Quartz CVE-2019-13990 - Pony MailMailing List;Third Party Advisory
-
https://confluence.atlassian.com/security/ssot-117-cve-2019-13990-xxe-xml-external-entity-injection-vulnerability-in-jira-service-management-data-center-and-jira-service-management-server-1295385959.html
CVE-2019-13990 - XXE (XML External Entity Injection) Vulnerability In Jira Service Management Data Center and Jira Service Management Server | Atlassian Support | Atlassian DocumentationThird Party Advisory
-
https://lists.apache.org/thread.html/172d405e556e2f1204be126bb3eb28c5115af91bcc1651b4e870bb82%40%3Cdev.tomee.apache.org%3E
Re: [VOTE] Release quartz-openejb-shade 2.2.4-Apache Mail ArchivesThird Party Advisory
-
https://www.oracle.com/security-alerts/cpujan2021.html
Oracle Critical Patch Update Advisory - January 2021Third Party Advisory
-
https://lists.apache.org/thread.html/172d405e556e2f1204be126bb3eb28c5115af91bcc1651b4e870bb82@%3Cdev.tomee.apache.org%3E
Re: [VOTE] Release quartz-openejb-shade 2.2.4 - Pony MailMailing List;Third Party Advisory
-
https://security.netapp.com/advisory/ntap-20221028-0002/
CVE-2019-13990 Quartz Vulnerability in NetApp Products | NetApp Product SecurityThird Party Advisory
-
https://www.oracle.com/security-alerts/cpuoct2021.html
Oracle Critical Patch Update Advisory - October 2021Third Party Advisory
-
https://lists.apache.org/thread.html/e493e718a50f21201e05e82d42a8796b4046e83f0d286b90e58e0629@%3Cdev.tomee.apache.org%3E
Pony Mail!Mailing List;Third Party Advisory
-
https://lists.apache.org/thread.html/e493e718a50f21201e05e82d42a8796b4046e83f0d286b90e58e0629%40%3Cdev.tomee.apache.org%3E
Re: Quartz CVE-2019-13990-Apache Mail ArchivesIssue Tracking
-
https://lists.apache.org/thread.html/1870324fea41ea68cff2fd1bf6ee2747432dc1d9d22a22cc681e0ec3%40%3Cdev.tomee.apache.org%3E
Quartz CVE-2019-13990-Apache Mail ArchivesIssue Tracking
-
https://github.com/quartz-scheduler/quartz/issues/467
Security: XXE in initDocumentParser · Issue #467 · quartz-scheduler/quartz · GitHubIssue Tracking;Third Party Advisory
-
https://lists.apache.org/thread.html/re9b56ac1934d7bf16afc83eac1c39c98c1b20b4b15891dce923bf8aa%40%3Ccommits.tomee.apache.org%3E
[jira] [Created] (TOMEE-2886) Update quartz-scheduler to mitigate CVE-2019-13990-Apache Mail ArchivesIssue Tracking
-
https://lists.apache.org/thread.html/1870324fea41ea68cff2fd1bf6ee2747432dc1d9d22a22cc681e0ec3@%3Cdev.tomee.apache.org%3E
Quartz CVE-2019-13990 - Pony MailMailing List;Third Party Advisory
Jump to