CVEDB API

Vulnerability Details CVE-2019-10086

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 58.8%

CVSS Severity

CVSS v3 Score 7.3

CVSS v2 Score 7.5

References

Products affected by CVE-2019-10086

Apache » Commons Beanutils » Version: 1.0

cpe:2.3:a:apache:commons_beanutils:1.0
Apache » Commons Beanutils » Version: 1.1

cpe:2.3:a:apache:commons_beanutils:1.1
Apache » Commons Beanutils » Version: 1.2

cpe:2.3:a:apache:commons_beanutils:1.2
Apache » Commons Beanutils » Version: 1.3

cpe:2.3:a:apache:commons_beanutils:1.3
Apache » Commons Beanutils » Version: 1.4

cpe:2.3:a:apache:commons_beanutils:1.4
Apache » Commons Beanutils » Version: 1.4.1

cpe:2.3:a:apache:commons_beanutils:1.4.1
Apache » Commons Beanutils » Version: 1.5

cpe:2.3:a:apache:commons_beanutils:1.5
Apache » Commons Beanutils » Version: 1.6

cpe:2.3:a:apache:commons_beanutils:1.6
Apache » Commons Beanutils » Version: 1.6.1

cpe:2.3:a:apache:commons_beanutils:1.6.1
Apache » Commons Beanutils » Version: 1.7.0

cpe:2.3:a:apache:commons_beanutils:1.7.0
Apache » Commons Beanutils » Version: 1.8.0

cpe:2.3:a:apache:commons_beanutils:1.8.0
Apache » Commons Beanutils » Version: 1.8.1

cpe:2.3:a:apache:commons_beanutils:1.8.1
Apache » Commons Beanutils » Version: 1.8.2

cpe:2.3:a:apache:commons_beanutils:1.8.2
Apache » Commons Beanutils » Version: 1.8.3

cpe:2.3:a:apache:commons_beanutils:1.8.3
Apache » Commons Beanutils » Version: 1.9.0

cpe:2.3:a:apache:commons_beanutils:1.9.0
Apache » Commons Beanutils » Version: 1.9.1

cpe:2.3:a:apache:commons_beanutils:1.9.1
Apache » Commons Beanutils » Version: 1.9.2

cpe:2.3:a:apache:commons_beanutils:1.9.2
Apache » Commons Beanutils » Version: 1.9.3

cpe:2.3:a:apache:commons_beanutils:1.9.3
Apache » Nifi » Version: 1.14.0

cpe:2.3:a:apache:nifi:1.14.0
Apache » Nifi » Version: 1.15.0

cpe:2.3:a:apache:nifi:1.15.0
Oracle » Agile Plm » Version: 9.3.3

cpe:2.3:a:oracle:agile_plm:9.3.3
Oracle » Agile Plm » Version: 9.3.5

cpe:2.3:a:oracle:agile_plm:9.3.5
Oracle » Agile Plm » Version: 9.3.6

cpe:2.3:a:oracle:agile_plm:9.3.6
Oracle » Agile Product Lifecycle Management Integration Pack » Version: 3.5

cpe:2.3:a:oracle:agile_product_lifecycle_management_integration_pack:3.5
Oracle » Agile Product Lifecycle Management Integration Pack » Version: 3.6

cpe:2.3:a:oracle:agile_product_lifecycle_management_integration_pack:3.6
Oracle » Application Testing Suite » Version: 13.3.0.1

cpe:2.3:a:oracle:application_testing_suite:13.3.0.1
Oracle » Banking Platform » Version: 2.4.0

cpe:2.3:a:oracle:banking_platform:2.4.0
Oracle » Banking Platform » Version: 2.7.1

cpe:2.3:a:oracle:banking_platform:2.7.1
Oracle » Banking Platform » Version: 2.9.0

cpe:2.3:a:oracle:banking_platform:2.9.0
Oracle » Blockchain Platform » Version: N/A

cpe:2.3:a:oracle:blockchain_platform:-
Oracle » Communications Billing And Revenue Management » Version: 12.0.0.3.0

cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0
Oracle » Communications Billing And Revenue Management » Version: 7.5

cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5
Oracle » Communications Billing And Revenue Management Elastic Charging Engine » Version: 11.3.0.9

cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:11.3.0.9
Oracle » Communications Billing And Revenue Management Elastic Charging Engine » Version: 12.0.0.3

cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:12.0.0.3
Oracle » Communications Cloud Native Core Console » Version: 1.4.0

cpe:2.3:a:oracle:communications_cloud_native_core_console:1.4.0
Oracle » Communications Cloud Native Core Policy » Version: 1.9.0

cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.9.0
Oracle » Communications Cloud Native Core Unified Data Repository » Version: 1.6.0

cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.6.0
Oracle » Communications Convergence » Version: 3.0.2.2.0

cpe:2.3:a:oracle:communications_convergence:3.0.2.2.0
Oracle » Communications Design Studio » Version: 7.3.4

cpe:2.3:a:oracle:communications_design_studio:7.3.4
Oracle » Communications Design Studio » Version: 7.3.5

cpe:2.3:a:oracle:communications_design_studio:7.3.5
Oracle » Communications Design Studio » Version: 7.4.0

cpe:2.3:a:oracle:communications_design_studio:7.4.0
Oracle » Communications Evolved Communications Application Server » Version: 7.1

cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1
Oracle » Communications Metasolv Solution » Version: 6.3.0

cpe:2.3:a:oracle:communications_metasolv_solution:6.3.0
Oracle » Communications Metasolv Solution » Version: 6.3.1

cpe:2.3:a:oracle:communications_metasolv_solution:6.3.1
Oracle » Communications Network Integrity » Version: 7.3.6

cpe:2.3:a:oracle:communications_network_integrity:7.3.6
Oracle » Communications Performance Intelligence Center » Version: 10.4.0.3

cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.3
Oracle » Communications Pricing Design Center » Version: 12.0.0.3.0

cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.3.0
Oracle » Communications Unified Inventory Management » Version: 7.3.4

cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4
Oracle » Communications Unified Inventory Management » Version: 7.3.5

cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5
Oracle » Communications Unified Inventory Management » Version: 7.4.0

cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0
Oracle » Communications Unified Inventory Management » Version: 7.4.1

cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1
Oracle » Customer Management And Segmentation Foundation » Version: 18.0

cpe:2.3:a:oracle:customer_management_and_segmentation_foundation:18.0
Oracle » Enterprise Manager For Virtualization » Version: 13.4.0.0

cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.4.0.0
Oracle » Financial Services Revenue Management And Billing Analytics » Version: 2.7

cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.7
Oracle » Financial Services Revenue Management And Billing Analytics » Version: 2.8

cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.8
Oracle » Flexcube Private Banking » Version: 12.0.0

cpe:2.3:a:oracle:flexcube_private_banking:12.0.0
Oracle » Flexcube Private Banking » Version: 12.1.0

cpe:2.3:a:oracle:flexcube_private_banking:12.1.0
Oracle » Fusion Middleware » Version: 11.1.1.9

cpe:2.3:a:oracle:fusion_middleware:11.1.1.9
Oracle » Fusion Middleware » Version: 12.2.1.3.0

cpe:2.3:a:oracle:fusion_middleware:12.2.1.3.0
Oracle » Fusion Middleware » Version: 12.2.1.4.0

cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0
Oracle » Healthcare Foundation » Version: 7.1.5

cpe:2.3:a:oracle:healthcare_foundation:7.1.5
Oracle » Healthcare Foundation » Version: 7.2.2

cpe:2.3:a:oracle:healthcare_foundation:7.2.2
Oracle » Healthcare Foundation » Version: 7.3.0

cpe:2.3:a:oracle:healthcare_foundation:7.3.0
Oracle » Healthcare Foundation » Version: 7.3.1

cpe:2.3:a:oracle:healthcare_foundation:7.3.1
Oracle » Healthcare Foundation » Version: 8.0.1

cpe:2.3:a:oracle:healthcare_foundation:8.0.1
Oracle » Hospitality Opera 5 » Version: 5.5

cpe:2.3:a:oracle:hospitality_opera_5:5.5
Oracle » Hospitality Opera 5 » Version: 5.6

cpe:2.3:a:oracle:hospitality_opera_5:5.6
Oracle » Hospitality Reporting And Analytics » Version: 9.1.0

cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.1.0
Oracle » Insurance Data Gateway » Version: 1.0.2.3

cpe:2.3:a:oracle:insurance_data_gateway:1.0.2.3
Oracle » Jd Edwards Enterpriseone Orchestrator » Version: N/A

cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:-
Oracle » Jd Edwards Enterpriseone Orchestrator » Version: 9.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:9.2
Oracle » Jd Edwards Enterpriseone Orchestrator » Version: 9.2.4.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:9.2.4.2
Oracle » Jd Edwards Enterpriseone Orchestrator » Version: 9.2.5.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:9.2.5.0
Oracle » Jd Edwards Enterpriseone Orchestrator » Version: 9.2.5.1

cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:9.2.5.1
Oracle » Jd Edwards Enterpriseone Orchestrator » Version: 9.2.5.3

cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:9.2.5.3
Oracle » Jd Edwards Enterpriseone Tools » Version: N/A

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:-
Oracle » Jd Edwards Enterpriseone Tools » Version: 4.0.1.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:4.0.1.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.1

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.1
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.1.5

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.1.5
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.0.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.0.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.4.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.4.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.4.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.4.2
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.5.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.5.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.5.3

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.5.3
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.56

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.57

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57
Oracle » Peoplesoft Enterprise Pt Peopletools » Version: 8.56

cpe:2.3:a:oracle:peoplesoft_enterprise_pt_peopletools:8.56
Oracle » Peoplesoft Enterprise Pt Peopletools » Version: 8.57

cpe:2.3:a:oracle:peoplesoft_enterprise_pt_peopletools:8.57
Oracle » Peoplesoft Enterprise Pt Peopletools » Version: 8.58

cpe:2.3:a:oracle:peoplesoft_enterprise_pt_peopletools:8.58
Oracle » Primavera Gateway » Version: 16.2.0

cpe:2.3:a:oracle:primavera_gateway:16.2.0
Oracle » Primavera Gateway » Version: 16.2.11

cpe:2.3:a:oracle:primavera_gateway:16.2.11
Oracle » Primavera Gateway » Version: 17.12.0

cpe:2.3:a:oracle:primavera_gateway:17.12.0
Oracle » Primavera Gateway » Version: 17.12.6

cpe:2.3:a:oracle:primavera_gateway:17.12.6
Oracle » Real-Time Decisions Solutions » Version: 3.2.0.0

cpe:2.3:a:oracle:real-time_decisions_solutions:3.2.0.0
Oracle » Retail Advanced Inventory Planning » Version: 14.1

cpe:2.3:a:oracle:retail_advanced_inventory_planning:14.1
Oracle » Retail Back Office » Version: 14.1

cpe:2.3:a:oracle:retail_back_office:14.1
Oracle » Retail Central Office » Version: 14.1

cpe:2.3:a:oracle:retail_central_office:14.1
Oracle » Retail Invoice Matching » Version: 16.0.3

cpe:2.3:a:oracle:retail_invoice_matching:16.0.3
Oracle » Retail Merchandising System » Version: 5.0.3.1

cpe:2.3:a:oracle:retail_merchandising_system:5.0.3.1
Oracle » Retail Point-Of-Service » Version: 14.1

cpe:2.3:a:oracle:retail_point-of-service:14.1
Oracle » Retail Predictive Application Server » Version: 16.0

cpe:2.3:a:oracle:retail_predictive_application_server:16.0
Oracle » Retail Price Management » Version: 14.0

cpe:2.3:a:oracle:retail_price_management:14.0
Oracle » Retail Price Management » Version: 14.0.1

cpe:2.3:a:oracle:retail_price_management:14.0.1
Oracle » Retail Price Management » Version: 15.0

cpe:2.3:a:oracle:retail_price_management:15.0
Oracle » Retail Price Management » Version: 16.0

cpe:2.3:a:oracle:retail_price_management:16.0
Oracle » Retail Returns Management » Version: 14.1

cpe:2.3:a:oracle:retail_returns_management:14.1
Oracle » Retail Xstore Point Of Service » Version: 15.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0
Oracle » Retail Xstore Point Of Service » Version: 16.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0
Oracle » Retail Xstore Point Of Service » Version: 17.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0
Oracle » Retail Xstore Point Of Service » Version: 18.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0
Oracle » Retail Xstore Point Of Service » Version: 7.1

cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1
Oracle » Service Bus » Version: 11.1.1.9.0

cpe:2.3:a:oracle:service_bus:11.1.1.9.0
Oracle » Service Bus » Version: 12.2.1.3.0

cpe:2.3:a:oracle:service_bus:12.2.1.3.0
Oracle » Service Bus » Version: 12.2.1.4.0

cpe:2.3:a:oracle:service_bus:12.2.1.4.0
Oracle » Solaris Cluster » Version: 4.4

cpe:2.3:a:oracle:solaris_cluster:4.4
Oracle » Time And Labor » Version: 12.2.11

cpe:2.3:a:oracle:time_and_labor:12.2.11
Oracle » Time And Labor » Version: 12.2.6

cpe:2.3:a:oracle:time_and_labor:12.2.6
Oracle » Utilities Framework » Version: 4.2.0.2.0

cpe:2.3:a:oracle:utilities_framework:4.2.0.2.0
Oracle » Utilities Framework » Version: 4.2.0.3.0

cpe:2.3:a:oracle:utilities_framework:4.2.0.3.0
Oracle » Utilities Framework » Version: 4.3.0.1.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.1.0
Oracle » Utilities Framework » Version: 4.3.0.2.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.2.0
Oracle » Utilities Framework » Version: 4.3.0.3.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.3.0
Oracle » Utilities Framework » Version: 4.3.0.4

cpe:2.3:a:oracle:utilities_framework:4.3.0.4
Oracle » Utilities Framework » Version: 4.3.0.4.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.4.0
Oracle » Utilities Framework » Version: 4.3.0.5.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.5.0
Oracle » Utilities Framework » Version: 4.3.0.6.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.6.0
Oracle » Utilities Framework » Version: 4.4.0.0.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0
Oracle » Utilities Framework » Version: 4.4.0.2.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0
Oracle » Utilities Framework » Version: 4.4.0.3.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.3.0
Oracle » Weblogic Server » Version: 10.3.6.0.0

cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0
Redhat » Jboss Enterprise Application Platform » Version: 7.2.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Fedoraproject » Fedora » Version: 31

cpe:2.3:o:fedoraproject:fedora:31
Opensuse » Leap » Version: 15.0

cpe:2.3:o:opensuse:leap:15.0
Opensuse » Leap » Version: 15.1

cpe:2.3:o:opensuse:leap:15.1
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Eus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_eus:7.7
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux_server:8.0
Redhat » Enterprise Linux Server Aus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7
Redhat » Enterprise Linux Server Tus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10086

Products

Pricing

Contact Us