CVEDB API

Vulnerability Details CVE-2019-0228

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.078

EPSS Ranking 91.5%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2019-0228

Apache » James » Version: 3.3.0

cpe:2.3:a:apache:james:3.3.0
Apache » James » Version: 3.4.0

cpe:2.3:a:apache:james:3.4.0
Apache » Pdfbox » Version: 2.0.14

cpe:2.3:a:apache:pdfbox:2.0.14
Oracle » Banking Corporate Lending Process Management » Version: 14.2

cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2
Oracle » Banking Corporate Lending Process Management » Version: 14.3

cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3
Oracle » Banking Corporate Lending Process Management » Version: 14.5

cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5
Oracle » Banking Credit Facilities Process Management » Version: 14.2

cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2
Oracle » Banking Credit Facilities Process Management » Version: 14.3

cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3
Oracle » Banking Credit Facilities Process Management » Version: 14.5

cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5
Oracle » Banking Supply Chain Finance » Version: 14.2

cpe:2.3:a:oracle:banking_supply_chain_finance:14.2
Oracle » Banking Supply Chain Finance » Version: 14.3

cpe:2.3:a:oracle:banking_supply_chain_finance:14.3
Oracle » Banking Supply Chain Finance » Version: 14.5

cpe:2.3:a:oracle:banking_supply_chain_finance:14.5
Oracle » Banking Trade Finance Process Management » Version: 14.2

cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2
Oracle » Banking Trade Finance Process Management » Version: 14.3

cpe:2.3:a:oracle:banking_trade_finance_process_management:14.3
Oracle » Banking Trade Finance Process Management » Version: 14.5

cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5
Oracle » Banking Virtual Account Management » Version: 14.2

cpe:2.3:a:oracle:banking_virtual_account_management:14.2
Oracle » Banking Virtual Account Management » Version: 14.3.0

cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0
Oracle » Banking Virtual Account Management » Version: 14.5

cpe:2.3:a:oracle:banking_virtual_account_management:14.5
Oracle » Communications Messaging Server » Version: 8.1

cpe:2.3:a:oracle:communications_messaging_server:8.1
Oracle » Communications Session Report Manager » Version: 8.0.0.0

cpe:2.3:a:oracle:communications_session_report_manager:8.0.0.0
Oracle » Communications Session Report Manager » Version: 8.1.0

cpe:2.3:a:oracle:communications_session_report_manager:8.1.0
Oracle » Communications Session Report Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_session_report_manager:8.1.1
Oracle » Communications Session Report Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_report_manager:8.2.0
Oracle » Communications Session Report Manager » Version: 8.2.1

cpe:2.3:a:oracle:communications_session_report_manager:8.2.1
Oracle » Communications Session Report Manager » Version: 8.2.2

cpe:2.3:a:oracle:communications_session_report_manager:8.2.2
Oracle » Communications Session Report Manager » Version: 8.2.2.1

cpe:2.3:a:oracle:communications_session_report_manager:8.2.2.1
Oracle » Communications Session Report Manager » Version: 8.2.4.0

cpe:2.3:a:oracle:communications_session_report_manager:8.2.4.0
Oracle » Hyperion Financial Reporting » Version: 11.1.2.4

cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2.4
Oracle » Hyperion Financial Reporting » Version: 11.2.6.0

cpe:2.3:a:oracle:hyperion_financial_reporting:11.2.6.0
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.58

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.59

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59
Oracle » Retail Xstore Point Of Service » Version: 16.0.6

cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6
Oracle » Retail Xstore Point Of Service » Version: 17.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0
Oracle » Retail Xstore Point Of Service » Version: 18.0.3

cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3
Oracle » Webcenter Sites » Version: 12.2.1.3.0

cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0
Oracle » Webcenter Sites » Version: 12.2.1.4.0

cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0
Fedoraproject » Fedora » Version: 29

cpe:2.3:o:fedoraproject:fedora:29
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Oracle » Communications Messaging Server » Version: 8.1

cpe:2.3:o:oracle:communications_messaging_server:8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-0228

Products

Pricing

Contact Us