CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-13990

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.079

EPSS Ranking 91.6%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2019-13990

Apache » Tomee » Version: 7.1.3

cpe:2.3:a:apache:tomee:7.1.3
Atlassian » Jira Service Management » Version: 4.20.0

cpe:2.3:a:atlassian:jira_service_management:4.20.0
Atlassian » Jira Service Management » Version: 4.20.1

cpe:2.3:a:atlassian:jira_service_management:4.20.1
Atlassian » Jira Service Management » Version: 4.20.10

cpe:2.3:a:atlassian:jira_service_management:4.20.10
Atlassian » Jira Service Management » Version: 4.20.11

cpe:2.3:a:atlassian:jira_service_management:4.20.11
Atlassian » Jira Service Management » Version: 4.20.12

cpe:2.3:a:atlassian:jira_service_management:4.20.12
Atlassian » Jira Service Management » Version: 4.20.13

cpe:2.3:a:atlassian:jira_service_management:4.20.13
Atlassian » Jira Service Management » Version: 4.20.14

cpe:2.3:a:atlassian:jira_service_management:4.20.14
Atlassian » Jira Service Management » Version: 4.20.15

cpe:2.3:a:atlassian:jira_service_management:4.20.15
Atlassian » Jira Service Management » Version: 4.20.16

cpe:2.3:a:atlassian:jira_service_management:4.20.16
Atlassian » Jira Service Management » Version: 4.20.17

cpe:2.3:a:atlassian:jira_service_management:4.20.17
Atlassian » Jira Service Management » Version: 4.20.18

cpe:2.3:a:atlassian:jira_service_management:4.20.18
Atlassian » Jira Service Management » Version: 4.20.19

cpe:2.3:a:atlassian:jira_service_management:4.20.19
Atlassian » Jira Service Management » Version: 4.20.2

cpe:2.3:a:atlassian:jira_service_management:4.20.2
Atlassian » Jira Service Management » Version: 4.20.20

cpe:2.3:a:atlassian:jira_service_management:4.20.20
Atlassian » Jira Service Management » Version: 4.20.21

cpe:2.3:a:atlassian:jira_service_management:4.20.21
Atlassian » Jira Service Management » Version: 4.20.22

cpe:2.3:a:atlassian:jira_service_management:4.20.22
Atlassian » Jira Service Management » Version: 4.20.23

cpe:2.3:a:atlassian:jira_service_management:4.20.23
Atlassian » Jira Service Management » Version: 4.20.24

cpe:2.3:a:atlassian:jira_service_management:4.20.24
Atlassian » Jira Service Management » Version: 4.20.25

cpe:2.3:a:atlassian:jira_service_management:4.20.25
Atlassian » Jira Service Management » Version: 4.20.3

cpe:2.3:a:atlassian:jira_service_management:4.20.3
Atlassian » Jira Service Management » Version: 4.20.4

cpe:2.3:a:atlassian:jira_service_management:4.20.4
Atlassian » Jira Service Management » Version: 4.20.5

cpe:2.3:a:atlassian:jira_service_management:4.20.5
Atlassian » Jira Service Management » Version: 4.20.6

cpe:2.3:a:atlassian:jira_service_management:4.20.6
Atlassian » Jira Service Management » Version: 4.20.7

cpe:2.3:a:atlassian:jira_service_management:4.20.7
Atlassian » Jira Service Management » Version: 4.20.8

cpe:2.3:a:atlassian:jira_service_management:4.20.8
Atlassian » Jira Service Management » Version: 4.20.9

cpe:2.3:a:atlassian:jira_service_management:4.20.9
Atlassian » Jira Service Management » Version: 4.21.0

cpe:2.3:a:atlassian:jira_service_management:4.21.0
Atlassian » Jira Service Management » Version: 4.21.1

cpe:2.3:a:atlassian:jira_service_management:4.21.1
Atlassian » Jira Service Management » Version: 4.22.0

cpe:2.3:a:atlassian:jira_service_management:4.22.0
Atlassian » Jira Service Management » Version: 4.22.1

cpe:2.3:a:atlassian:jira_service_management:4.22.1
Atlassian » Jira Service Management » Version: 4.22.2

cpe:2.3:a:atlassian:jira_service_management:4.22.2
Atlassian » Jira Service Management » Version: 4.22.3

cpe:2.3:a:atlassian:jira_service_management:4.22.3
Atlassian » Jira Service Management » Version: 4.22.4

cpe:2.3:a:atlassian:jira_service_management:4.22.4
Atlassian » Jira Service Management » Version: 4.22.6

cpe:2.3:a:atlassian:jira_service_management:4.22.6
Atlassian » Jira Service Management » Version: 5.0.0

cpe:2.3:a:atlassian:jira_service_management:5.0.0
Atlassian » Jira Service Management » Version: 5.1.0

cpe:2.3:a:atlassian:jira_service_management:5.1.0
Atlassian » Jira Service Management » Version: 5.1.1

cpe:2.3:a:atlassian:jira_service_management:5.1.1
Atlassian » Jira Service Management » Version: 5.10.0

cpe:2.3:a:atlassian:jira_service_management:5.10.0
Atlassian » Jira Service Management » Version: 5.2.0

cpe:2.3:a:atlassian:jira_service_management:5.2.0
Atlassian » Jira Service Management » Version: 5.2.1

cpe:2.3:a:atlassian:jira_service_management:5.2.1
Atlassian » Jira Service Management » Version: 5.3.0

cpe:2.3:a:atlassian:jira_service_management:5.3.0
Atlassian » Jira Service Management » Version: 5.3.1

cpe:2.3:a:atlassian:jira_service_management:5.3.1
Atlassian » Jira Service Management » Version: 5.3.2

cpe:2.3:a:atlassian:jira_service_management:5.3.2
Atlassian » Jira Service Management » Version: 5.3.3

cpe:2.3:a:atlassian:jira_service_management:5.3.3
Atlassian » Jira Service Management » Version: 5.4.0

cpe:2.3:a:atlassian:jira_service_management:5.4.0
Atlassian » Jira Service Management » Version: 5.4.1

cpe:2.3:a:atlassian:jira_service_management:5.4.1
Atlassian » Jira Service Management » Version: 5.4.2

cpe:2.3:a:atlassian:jira_service_management:5.4.2
Atlassian » Jira Service Management » Version: 5.4.3

cpe:2.3:a:atlassian:jira_service_management:5.4.3
Atlassian » Jira Service Management » Version: 5.4.4

cpe:2.3:a:atlassian:jira_service_management:5.4.4
Atlassian » Jira Service Management » Version: 5.4.5

cpe:2.3:a:atlassian:jira_service_management:5.4.5
Atlassian » Jira Service Management » Version: 5.4.6

cpe:2.3:a:atlassian:jira_service_management:5.4.6
Atlassian » Jira Service Management » Version: 5.4.7

cpe:2.3:a:atlassian:jira_service_management:5.4.7
Atlassian » Jira Service Management » Version: 5.4.8

cpe:2.3:a:atlassian:jira_service_management:5.4.8
Atlassian » Jira Service Management » Version: 5.4.9

cpe:2.3:a:atlassian:jira_service_management:5.4.9
Atlassian » Jira Service Management » Version: 5.5.1

cpe:2.3:a:atlassian:jira_service_management:5.5.1
Atlassian » Jira Service Management » Version: 5.6.0

cpe:2.3:a:atlassian:jira_service_management:5.6.0
Atlassian » Jira Service Management » Version: 5.7.0

cpe:2.3:a:atlassian:jira_service_management:5.7.0
Atlassian » Jira Service Management » Version: 5.7.1

cpe:2.3:a:atlassian:jira_service_management:5.7.1
Atlassian » Jira Service Management » Version: 5.8.0

cpe:2.3:a:atlassian:jira_service_management:5.8.0
Atlassian » Jira Service Management » Version: 5.8.1

cpe:2.3:a:atlassian:jira_service_management:5.8.1
Atlassian » Jira Service Management » Version: 5.9.0

cpe:2.3:a:atlassian:jira_service_management:5.9.0
Netapp » Active Iq Unified Manager » Version: N/A

cpe:2.3:a:netapp:active_iq_unified_manager:-
Netapp » Cloud Secure Agent » Version: N/A

cpe:2.3:a:netapp:cloud_secure_agent:-
Oracle » Apache Batik Mapviewer » Version: 12.2.0.1

cpe:2.3:a:oracle:apache_batik_mapviewer:12.2.0.1
Oracle » Apache Batik Mapviewer » Version: 18c

cpe:2.3:a:oracle:apache_batik_mapviewer:18c
Oracle » Apache Batik Mapviewer » Version: 19c

cpe:2.3:a:oracle:apache_batik_mapviewer:19c
Oracle » Banking Enterprise Originations » Version: 2.7.0

cpe:2.3:a:oracle:banking_enterprise_originations:2.7.0
Oracle » Banking Enterprise Originations » Version: 2.8.0

cpe:2.3:a:oracle:banking_enterprise_originations:2.8.0
Oracle » Banking Enterprise Product Manufacturing » Version: 2.7.0

cpe:2.3:a:oracle:banking_enterprise_product_manufacturing:2.7.0
Oracle » Banking Enterprise Product Manufacturing » Version: 2.8.0

cpe:2.3:a:oracle:banking_enterprise_product_manufacturing:2.8.0
Oracle » Banking Payments » Version: 14.1.0

cpe:2.3:a:oracle:banking_payments:14.1.0
Oracle » Banking Payments » Version: 14.3.0

cpe:2.3:a:oracle:banking_payments:14.3.0
Oracle » Banking Payments » Version: 14.4.0

cpe:2.3:a:oracle:banking_payments:14.4.0
Oracle » Communications Ip Service Activator » Version: 7.3.0

cpe:2.3:a:oracle:communications_ip_service_activator:7.3.0
Oracle » Communications Ip Service Activator » Version: 7.4.0

cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0
Oracle » Communications Session Route Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_route_manager:8.2.0
Oracle » Communications Session Route Manager » Version: 8.2.0.0

cpe:2.3:a:oracle:communications_session_route_manager:8.2.0.0
Oracle » Communications Session Route Manager » Version: 8.2.1

cpe:2.3:a:oracle:communications_session_route_manager:8.2.1
Oracle » Communications Session Route Manager » Version: 8.2.2

cpe:2.3:a:oracle:communications_session_route_manager:8.2.2
Oracle » Customer Management And Segmentation Foundation » Version: 18.0

cpe:2.3:a:oracle:customer_management_and_segmentation_foundation:18.0
Oracle » Documaker » Version: 12.6.0

cpe:2.3:a:oracle:documaker:12.6.0
Oracle » Documaker » Version: 12.6.3

cpe:2.3:a:oracle:documaker:12.6.3
Oracle » Documaker » Version: 12.6.4

cpe:2.3:a:oracle:documaker:12.6.4
Oracle » Enterprise Manager Base Platform » Version: 13.2.1.0

cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.1.0
Oracle » Enterprise Manager Ops Center » Version: 12.4.0.0

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0
Oracle » Flexcube Investor Servicing » Version: 12.1.0

cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0
Oracle » Flexcube Investor Servicing » Version: 12.3.0

cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0
Oracle » Flexcube Investor Servicing » Version: 12.4.0

cpe:2.3:a:oracle:flexcube_investor_servicing:12.4.0
Oracle » Flexcube Investor Servicing » Version: 14.1.0

cpe:2.3:a:oracle:flexcube_investor_servicing:14.1.0
Oracle » Flexcube Investor Servicing » Version: 14.4.0

cpe:2.3:a:oracle:flexcube_investor_servicing:14.4.0
Oracle » Flexcube Private Banking » Version: 12.0.0

cpe:2.3:a:oracle:flexcube_private_banking:12.0.0
Oracle » Flexcube Private Banking » Version: 12.1.0

cpe:2.3:a:oracle:flexcube_private_banking:12.1.0
Oracle » Fusion Middleware Mapviewer » Version: 12.2.1.3.0

cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0
Oracle » Google Guava Mapviewer » Version: 12.2.0.1

cpe:2.3:a:oracle:google_guava_mapviewer:12.2.0.1
Oracle » Google Guava Mapviewer » Version: 18c

cpe:2.3:a:oracle:google_guava_mapviewer:18c
Oracle » Google Guava Mapviewer » Version: 19c

cpe:2.3:a:oracle:google_guava_mapviewer:19c
Oracle » Hyperion Infrastructure Technology » Version: 11.1.2.4

cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4
Oracle » Jd Edwards Enterpriseone Orchestrator » Version: N/A

cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:-
Oracle » Jd Edwards Enterpriseone Orchestrator » Version: 9.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:9.2
Oracle » Jd Edwards Enterpriseone Orchestrator » Version: 9.2.4.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:9.2.4.2
Oracle » Jd Edwards Enterpriseone Orchestrator » Version: 9.2.5.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:9.2.5.0
Oracle » Jd Edwards Enterpriseone Orchestrator » Version: 9.2.5.1

cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:9.2.5.1
Oracle » Jd Edwards Enterpriseone Orchestrator » Version: 9.2.5.3

cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:9.2.5.3
Oracle » Primavera Unifier » Version: 16.1

cpe:2.3:a:oracle:primavera_unifier:16.1
Oracle » Primavera Unifier » Version: 16.2

cpe:2.3:a:oracle:primavera_unifier:16.2
Oracle » Primavera Unifier » Version: 17.10

cpe:2.3:a:oracle:primavera_unifier:17.10
Oracle » Primavera Unifier » Version: 17.11

cpe:2.3:a:oracle:primavera_unifier:17.11
Oracle » Primavera Unifier » Version: 17.12

cpe:2.3:a:oracle:primavera_unifier:17.12
Oracle » Primavera Unifier » Version: 17.7

cpe:2.3:a:oracle:primavera_unifier:17.7
Oracle » Primavera Unifier » Version: 17.8

cpe:2.3:a:oracle:primavera_unifier:17.8
Oracle » Primavera Unifier » Version: 17.9

cpe:2.3:a:oracle:primavera_unifier:17.9
Oracle » Primavera Unifier » Version: 18.8

cpe:2.3:a:oracle:primavera_unifier:18.8
Oracle » Retail Back Office » Version: 14.1

cpe:2.3:a:oracle:retail_back_office:14.1
Oracle » Retail Central Office » Version: 14.1

cpe:2.3:a:oracle:retail_central_office:14.1
Oracle » Retail Integration Bus » Version: 15.0

cpe:2.3:a:oracle:retail_integration_bus:15.0
Oracle » Retail Integration Bus » Version: 16.0

cpe:2.3:a:oracle:retail_integration_bus:16.0
Oracle » Retail Order Broker » Version: 15.0

cpe:2.3:a:oracle:retail_order_broker:15.0
Oracle » Retail Order Broker » Version: 16.0

cpe:2.3:a:oracle:retail_order_broker:16.0
Oracle » Retail Order Broker » Version: 18.0

cpe:2.3:a:oracle:retail_order_broker:18.0
Oracle » Retail Order Broker » Version: 19.0

cpe:2.3:a:oracle:retail_order_broker:19.0
Oracle » Retail Point-Of-Service » Version: 14.1

cpe:2.3:a:oracle:retail_point-of-service:14.1
Oracle » Retail Returns Management » Version: 14.1

cpe:2.3:a:oracle:retail_returns_management:14.1
Oracle » Retail Xstore Point Of Service » Version: 15.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0
Oracle » Retail Xstore Point Of Service » Version: 16.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0
Oracle » Retail Xstore Point Of Service » Version: 17.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0
Oracle » Retail Xstore Point Of Service » Version: 18.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0
Oracle » Retail Xstore Point Of Service » Version: 19.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0
Oracle » Terracotta Quartz Scheduler Mapviewer » Version: 12.2.0.1

cpe:2.3:a:oracle:terracotta_quartz_scheduler_mapviewer:12.2.0.1
Oracle » Terracotta Quartz Scheduler Mapviewer » Version: 18c

cpe:2.3:a:oracle:terracotta_quartz_scheduler_mapviewer:18c
Oracle » Terracotta Quartz Scheduler Mapviewer » Version: 19c

cpe:2.3:a:oracle:terracotta_quartz_scheduler_mapviewer:19c
Oracle » Webcenter Sites » Version: 12.2.1.3.0

cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0
Oracle » Webcenter Sites » Version: 12.2.1.4.0

cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0
Softwareag » Quartz » Version: N/A

cpe:2.3:a:softwareag:quartz:-
Softwareag » Quartz » Version: 1.8.0

cpe:2.3:a:softwareag:quartz:1.8.0
Softwareag » Quartz » Version: 1.8.1

cpe:2.3:a:softwareag:quartz:1.8.1
Softwareag » Quartz » Version: 1.8.2

cpe:2.3:a:softwareag:quartz:1.8.2
Softwareag » Quartz » Version: 1.8.3

cpe:2.3:a:softwareag:quartz:1.8.3
Softwareag » Quartz » Version: 1.8.4

cpe:2.3:a:softwareag:quartz:1.8.4
Softwareag » Quartz » Version: 1.8.5

cpe:2.3:a:softwareag:quartz:1.8.5
Softwareag » Quartz » Version: 1.8.6

cpe:2.3:a:softwareag:quartz:1.8.6
Softwareag » Quartz » Version: 2.0.0

cpe:2.3:a:softwareag:quartz:2.0.0
Softwareag » Quartz » Version: 2.0.1

cpe:2.3:a:softwareag:quartz:2.0.1
Softwareag » Quartz » Version: 2.0.2

cpe:2.3:a:softwareag:quartz:2.0.2
Softwareag » Quartz » Version: 2.1.0

cpe:2.3:a:softwareag:quartz:2.1.0
Softwareag » Quartz » Version: 2.1.1

cpe:2.3:a:softwareag:quartz:2.1.1
Softwareag » Quartz » Version: 2.1.2

cpe:2.3:a:softwareag:quartz:2.1.2
Softwareag » Quartz » Version: 2.1.3

cpe:2.3:a:softwareag:quartz:2.1.3
Softwareag » Quartz » Version: 2.1.4

cpe:2.3:a:softwareag:quartz:2.1.4
Softwareag » Quartz » Version: 2.1.5

cpe:2.3:a:softwareag:quartz:2.1.5
Softwareag » Quartz » Version: 2.1.6

cpe:2.3:a:softwareag:quartz:2.1.6
Softwareag » Quartz » Version: 2.1.7

cpe:2.3:a:softwareag:quartz:2.1.7
Softwareag » Quartz » Version: 2.2.0

cpe:2.3:a:softwareag:quartz:2.2.0
Softwareag » Quartz » Version: 2.2.1

cpe:2.3:a:softwareag:quartz:2.2.1
Softwareag » Quartz » Version: 2.2.2

cpe:2.3:a:softwareag:quartz:2.2.2
Softwareag » Quartz » Version: 2.2.3

cpe:2.3:a:softwareag:quartz:2.2.3
Softwareag » Quartz » Version: 2.3.0

cpe:2.3:a:softwareag:quartz:2.3.0
Softwareag » Quartz » Version: 2.3.1

cpe:2.3:a:softwareag:quartz:2.3.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-13990

Products

Pricing

Contact Us