CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-3772

Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.028

EPSS Ranking 85.2%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2019-3772

Oracle » Retail Customer Management And Segmentation Foundation » Version: 16.0

cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:16.0
Oracle » Retail Customer Management And Segmentation Foundation » Version: 17.0

cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:17.0
Oracle » Retail Customer Management And Segmentation Foundation » Version: 18.0

cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.0
Vmware » Spring Integration » Version: 1.0.0

cpe:2.3:a:vmware:spring_integration:1.0.0
Vmware » Spring Integration » Version: 1.0.1

cpe:2.3:a:vmware:spring_integration:1.0.1
Vmware » Spring Integration » Version: 1.0.2

cpe:2.3:a:vmware:spring_integration:1.0.2
Vmware » Spring Integration » Version: 1.0.3

cpe:2.3:a:vmware:spring_integration:1.0.3
Vmware » Spring Integration » Version: 1.0.4

cpe:2.3:a:vmware:spring_integration:1.0.4
Vmware » Spring Integration » Version: 2.0.0

cpe:2.3:a:vmware:spring_integration:2.0.0
Vmware » Spring Integration » Version: 2.0.1

cpe:2.3:a:vmware:spring_integration:2.0.1
Vmware » Spring Integration » Version: 2.0.2

cpe:2.3:a:vmware:spring_integration:2.0.2
Vmware » Spring Integration » Version: 2.0.3

cpe:2.3:a:vmware:spring_integration:2.0.3
Vmware » Spring Integration » Version: 2.0.4

cpe:2.3:a:vmware:spring_integration:2.0.4
Vmware » Spring Integration » Version: 2.0.5

cpe:2.3:a:vmware:spring_integration:2.0.5
Vmware » Spring Integration » Version: 2.0.6

cpe:2.3:a:vmware:spring_integration:2.0.6
Vmware » Spring Integration » Version: 2.1.0

cpe:2.3:a:vmware:spring_integration:2.1.0
Vmware » Spring Integration » Version: 2.1.1

cpe:2.3:a:vmware:spring_integration:2.1.1
Vmware » Spring Integration » Version: 2.1.2

cpe:2.3:a:vmware:spring_integration:2.1.2
Vmware » Spring Integration » Version: 2.1.3

cpe:2.3:a:vmware:spring_integration:2.1.3
Vmware » Spring Integration » Version: 2.1.3c

cpe:2.3:a:vmware:spring_integration:2.1.3c
Vmware » Spring Integration » Version: 2.1.4

cpe:2.3:a:vmware:spring_integration:2.1.4
Vmware » Spring Integration » Version: 2.1.5

cpe:2.3:a:vmware:spring_integration:2.1.5
Vmware » Spring Integration » Version: 2.1.6

cpe:2.3:a:vmware:spring_integration:2.1.6
Vmware » Spring Integration » Version: 2.1.6c

cpe:2.3:a:vmware:spring_integration:2.1.6c
Vmware » Spring Integration » Version: 2.2.0

cpe:2.3:a:vmware:spring_integration:2.2.0
Vmware » Spring Integration » Version: 2.2.1

cpe:2.3:a:vmware:spring_integration:2.2.1
Vmware » Spring Integration » Version: 2.2.1b

cpe:2.3:a:vmware:spring_integration:2.2.1b
Vmware » Spring Integration » Version: 2.2.2

cpe:2.3:a:vmware:spring_integration:2.2.2
Vmware » Spring Integration » Version: 2.2.3

cpe:2.3:a:vmware:spring_integration:2.2.3
Vmware » Spring Integration » Version: 2.2.4

cpe:2.3:a:vmware:spring_integration:2.2.4
Vmware » Spring Integration » Version: 2.2.5

cpe:2.3:a:vmware:spring_integration:2.2.5
Vmware » Spring Integration » Version: 2.2.6

cpe:2.3:a:vmware:spring_integration:2.2.6
Vmware » Spring Integration » Version: 2.2.7

cpe:2.3:a:vmware:spring_integration:2.2.7
Vmware » Spring Integration » Version: 3.0.0

cpe:2.3:a:vmware:spring_integration:3.0.0
Vmware » Spring Integration » Version: 3.0.1

cpe:2.3:a:vmware:spring_integration:3.0.1
Vmware » Spring Integration » Version: 3.0.2

cpe:2.3:a:vmware:spring_integration:3.0.2
Vmware » Spring Integration » Version: 3.0.3

cpe:2.3:a:vmware:spring_integration:3.0.3
Vmware » Spring Integration » Version: 3.0.4

cpe:2.3:a:vmware:spring_integration:3.0.4
Vmware » Spring Integration » Version: 3.0.5

cpe:2.3:a:vmware:spring_integration:3.0.5
Vmware » Spring Integration » Version: 3.0.6

cpe:2.3:a:vmware:spring_integration:3.0.6
Vmware » Spring Integration » Version: 3.0.7

cpe:2.3:a:vmware:spring_integration:3.0.7
Vmware » Spring Integration » Version: 3.0.8

cpe:2.3:a:vmware:spring_integration:3.0.8
Vmware » Spring Integration » Version: 4.0.0

cpe:2.3:a:vmware:spring_integration:4.0.0
Vmware » Spring Integration » Version: 4.0.1

cpe:2.3:a:vmware:spring_integration:4.0.1
Vmware » Spring Integration » Version: 4.0.2

cpe:2.3:a:vmware:spring_integration:4.0.2
Vmware » Spring Integration » Version: 4.0.3

cpe:2.3:a:vmware:spring_integration:4.0.3
Vmware » Spring Integration » Version: 4.0.4

cpe:2.3:a:vmware:spring_integration:4.0.4
Vmware » Spring Integration » Version: 4.0.5

cpe:2.3:a:vmware:spring_integration:4.0.5
Vmware » Spring Integration » Version: 4.0.6

cpe:2.3:a:vmware:spring_integration:4.0.6
Vmware » Spring Integration » Version: 4.0.7

cpe:2.3:a:vmware:spring_integration:4.0.7
Vmware » Spring Integration » Version: 4.0.8

cpe:2.3:a:vmware:spring_integration:4.0.8
Vmware » Spring Integration » Version: 4.0.9

cpe:2.3:a:vmware:spring_integration:4.0.9
Vmware » Spring Integration » Version: 4.1.0

cpe:2.3:a:vmware:spring_integration:4.1.0
Vmware » Spring Integration » Version: 4.1.1

cpe:2.3:a:vmware:spring_integration:4.1.1
Vmware » Spring Integration » Version: 4.1.2

cpe:2.3:a:vmware:spring_integration:4.1.2
Vmware » Spring Integration » Version: 4.1.3

cpe:2.3:a:vmware:spring_integration:4.1.3
Vmware » Spring Integration » Version: 4.1.4

cpe:2.3:a:vmware:spring_integration:4.1.4
Vmware » Spring Integration » Version: 4.1.5

cpe:2.3:a:vmware:spring_integration:4.1.5
Vmware » Spring Integration » Version: 4.1.6

cpe:2.3:a:vmware:spring_integration:4.1.6
Vmware » Spring Integration » Version: 4.1.7

cpe:2.3:a:vmware:spring_integration:4.1.7
Vmware » Spring Integration » Version: 4.1.7a

cpe:2.3:a:vmware:spring_integration:4.1.7a
Vmware » Spring Integration » Version: 4.1.8

cpe:2.3:a:vmware:spring_integration:4.1.8
Vmware » Spring Integration » Version: 4.1.9

cpe:2.3:a:vmware:spring_integration:4.1.9
Vmware » Spring Integration » Version: 4.2.0

cpe:2.3:a:vmware:spring_integration:4.2.0
Vmware » Spring Integration » Version: 4.2.1

cpe:2.3:a:vmware:spring_integration:4.2.1
Vmware » Spring Integration » Version: 4.2.10

cpe:2.3:a:vmware:spring_integration:4.2.10
Vmware » Spring Integration » Version: 4.2.11

cpe:2.3:a:vmware:spring_integration:4.2.11
Vmware » Spring Integration » Version: 4.2.12

cpe:2.3:a:vmware:spring_integration:4.2.12
Vmware » Spring Integration » Version: 4.2.13

cpe:2.3:a:vmware:spring_integration:4.2.13
Vmware » Spring Integration » Version: 4.2.2

cpe:2.3:a:vmware:spring_integration:4.2.2
Vmware » Spring Integration » Version: 4.2.3

cpe:2.3:a:vmware:spring_integration:4.2.3
Vmware » Spring Integration » Version: 4.2.4

cpe:2.3:a:vmware:spring_integration:4.2.4
Vmware » Spring Integration » Version: 4.2.5

cpe:2.3:a:vmware:spring_integration:4.2.5
Vmware » Spring Integration » Version: 4.2.6

cpe:2.3:a:vmware:spring_integration:4.2.6
Vmware » Spring Integration » Version: 4.2.7

cpe:2.3:a:vmware:spring_integration:4.2.7
Vmware » Spring Integration » Version: 4.2.8

cpe:2.3:a:vmware:spring_integration:4.2.8
Vmware » Spring Integration » Version: 4.2.9

cpe:2.3:a:vmware:spring_integration:4.2.9
Vmware » Spring Integration » Version: 4.3.0

cpe:2.3:a:vmware:spring_integration:4.3.0
Vmware » Spring Integration » Version: 4.3.1

cpe:2.3:a:vmware:spring_integration:4.3.1
Vmware » Spring Integration » Version: 4.3.10

cpe:2.3:a:vmware:spring_integration:4.3.10
Vmware » Spring Integration » Version: 4.3.11

cpe:2.3:a:vmware:spring_integration:4.3.11
Vmware » Spring Integration » Version: 4.3.12

cpe:2.3:a:vmware:spring_integration:4.3.12
Vmware » Spring Integration » Version: 4.3.13

cpe:2.3:a:vmware:spring_integration:4.3.13
Vmware » Spring Integration » Version: 4.3.14

cpe:2.3:a:vmware:spring_integration:4.3.14
Vmware » Spring Integration » Version: 4.3.15

cpe:2.3:a:vmware:spring_integration:4.3.15
Vmware » Spring Integration » Version: 4.3.16

cpe:2.3:a:vmware:spring_integration:4.3.16
Vmware » Spring Integration » Version: 4.3.17

cpe:2.3:a:vmware:spring_integration:4.3.17
Vmware » Spring Integration » Version: 4.3.18

cpe:2.3:a:vmware:spring_integration:4.3.18
Vmware » Spring Integration » Version: 4.3.2

cpe:2.3:a:vmware:spring_integration:4.3.2
Vmware » Spring Integration » Version: 4.3.3

cpe:2.3:a:vmware:spring_integration:4.3.3
Vmware » Spring Integration » Version: 4.3.4

cpe:2.3:a:vmware:spring_integration:4.3.4
Vmware » Spring Integration » Version: 4.3.5

cpe:2.3:a:vmware:spring_integration:4.3.5
Vmware » Spring Integration » Version: 4.3.6

cpe:2.3:a:vmware:spring_integration:4.3.6
Vmware » Spring Integration » Version: 4.3.7

cpe:2.3:a:vmware:spring_integration:4.3.7
Vmware » Spring Integration » Version: 4.3.8

cpe:2.3:a:vmware:spring_integration:4.3.8
Vmware » Spring Integration » Version: 4.3.9

cpe:2.3:a:vmware:spring_integration:4.3.9
Vmware » Spring Integration » Version: 5.0.0

cpe:2.3:a:vmware:spring_integration:5.0.0
Vmware » Spring Integration » Version: 5.0.1

cpe:2.3:a:vmware:spring_integration:5.0.1
Vmware » Spring Integration » Version: 5.0.10

cpe:2.3:a:vmware:spring_integration:5.0.10
Vmware » Spring Integration » Version: 5.0.2

cpe:2.3:a:vmware:spring_integration:5.0.2
Vmware » Spring Integration » Version: 5.0.3

cpe:2.3:a:vmware:spring_integration:5.0.3
Vmware » Spring Integration » Version: 5.0.4

cpe:2.3:a:vmware:spring_integration:5.0.4
Vmware » Spring Integration » Version: 5.0.5

cpe:2.3:a:vmware:spring_integration:5.0.5
Vmware » Spring Integration » Version: 5.0.6

cpe:2.3:a:vmware:spring_integration:5.0.6
Vmware » Spring Integration » Version: 5.0.7

cpe:2.3:a:vmware:spring_integration:5.0.7
Vmware » Spring Integration » Version: 5.0.8

cpe:2.3:a:vmware:spring_integration:5.0.8
Vmware » Spring Integration » Version: 5.0.9

cpe:2.3:a:vmware:spring_integration:5.0.9
Vmware » Spring Integration » Version: 5.1.0

cpe:2.3:a:vmware:spring_integration:5.1.0
Vmware » Spring Integration » Version: 5.1.1

cpe:2.3:a:vmware:spring_integration:5.1.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-3772

Products

Pricing

Contact Us