CVE-2019-10219CWE-79cross-site-scripting

CVE-2019-10219

Medium · published November 8, 2019

CVSS v3.1
6.1
EPSS
2%
Percentile
82.0
In the wild
Unconfirmed
What it is

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.02157 · 82.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2019-11-08T20:15Z
Affected products (420)
ProductVersionsFixed in
redhat/hibernate_validator< 6.0.186.0.18
redhat/hibernate_validatorall versions—
redhat/hibernate_validatorall versions—
redhat/hibernate_validatorall versions—
redhat/hibernate_validatorall versions—
redhat/hibernate_validatorall versions—
redhat/hibernate_validatorall versions—
redhat/fuseall versions—
redhat/jboss_data_gridall versions—
redhat/jboss_enterprise_application_platformall versions—
redhat/openshift_application_runtimesall versions—
redhat/single_sign-onall versions—
redhat/jboss_enterprise_application_platformall versions—
redhat/jboss_enterprise_application_platformall versions—
netapp/active_iq_unified_managerall versions—
netapp/active_iq_unified_managerall versions—
netapp/active_iq_unified_managerall versions—
netapp/management_services_for_element_software_and_netapp_hciall versions—
netapp/snapcenter_plug-inall versions—
netapp/elementall versions—
oracle/communications_unified_inventory_managementall versions—
oracle/communications_unified_inventory_managementall versions—
oracle/communications_unified_inventory_managementall versions—
oracle/communications_unified_inventory_managementall versions—
oracle/communications_unified_inventory_managementall versions—
oracle/communications_unified_inventory_managementall versions—
oracle/communications_unified_inventory_managementall versions—
oracle/communications_webrtc_session_controllerall versions—
oracle/communications_webrtc_session_controllerall versions—
oracle/data_integratorall versions—
oracle/data_integratorall versions—
oracle/database_serverall versions—
oracle/database_serverall versions—
oracle/database_serverall versions—
oracle/database_serverall versions—
oracle/demantra_demand_management≥ 12.2.6, ≤ 12.2.11—
oracle/documaker≥ 12.6.0, ≤ 12.6.4—
oracle/e-business_suite≥ 12.2.3, ≤ 12.2.11—
oracle/access_managerall versions—
oracle/access_managerall versions—
oracle/access_managerall versions—
oracle/agile_engineering_data_managementall versions—
oracle/agile_product_lifecycle_analyticsall versions—
oracle/agile_product_lifecycle_managementall versions—
oracle/agile_product_lifecycle_managementall versions—
oracle/agile_product_lifecycle_management_integration_packall versions—
oracle/airlines_data_modelall versions—
oracle/airlines_data_modelall versions—
oracle/application_expressall versions—
oracle/application_performance_managementall versions—
oracle/application_performance_managementall versions—
oracle/application_testing_suiteall versions—
oracle/argus_analyticsall versions—
oracle/argus_analyticsall versions—
oracle/argus_analyticsall versions—
oracle/argus_analyticsall versions—
oracle/argus_insightall versions—
oracle/argus_insightall versions—
oracle/argus_insightall versions—
oracle/argus_safetyall versions—
oracle/argus_safetyall versions—
oracle/argus_safetyall versions—
oracle/banking_apisall versions—
oracle/banking_apisall versions—
oracle/banking_apisall versions—
oracle/banking_apisall versions—
oracle/banking_apisall versions—
oracle/banking_apisall versions—
oracle/banking_apisall versions—
oracle/banking_deposits_and_lines_of_credit_servicingall versions—
oracle/banking_digital_experienceall versions—
oracle/banking_digital_experienceall versions—
oracle/banking_digital_experienceall versions—
oracle/banking_digital_experienceall versions—
oracle/banking_digital_experienceall versions—
oracle/banking_digital_experienceall versions—
oracle/banking_digital_experienceall versions—
oracle/banking_enterprise_default_managementall versions—
oracle/banking_enterprise_default_managementall versions—
oracle/banking_enterprise_default_managementall versions—
oracle/banking_enterprise_default_managementall versions—
oracle/banking_enterprise_default_managementall versions—
oracle/banking_enterprise_default_managment≥ 2.3.0, ≤ 2.4.0—
oracle/banking_loans_servicingall versions—
oracle/banking_party_managementall versions—
oracle/banking_platform≥ 2.3.0, ≤ 2.4.1—
oracle/banking_platformall versions—
oracle/banking_platformall versions—
oracle/banking_platformall versions—
oracle/bi_publisherall versions—
oracle/bi_publisherall versions—
oracle/bi_publisherall versions—
oracle/bi_publisherall versions—
oracle/big_data_spatial_and_graphall versions—
oracle/business_activity_monitoringall versions—
oracle/business_intelligenceall versions—
oracle/business_intelligenceall versions—
oracle/business_intelligenceall versions—
oracle/business_intelligenceall versions—
oracle/business_process_management_suiteall versions—
oracle/business_process_management_suiteall versions—
oracle/clinicalall versions—
oracle/clinicalall versions—
oracle/commerce_guided_searchall versions—
oracle/commerce_platform≥ 11.3.0, ≤ 11.3.2—
oracle/communications_application_session_controllerall versions—
oracle/communications_billing_and_revenue_managementall versions—
oracle/communications_billing_and_revenue_managementall versions—
oracle/communications_billing_and_revenue_management_elastic_charging_engineall versions—
oracle/communications_billing_and_revenue_management_elastic_charging_engineall versions—
oracle/communications_calendar_serverall versions—
oracle/communications_calendar_serverall versions—
oracle/communications_cloud_native_core_automated_test_suiteall versions—
oracle/communications_cloud_native_core_binding_support_functionall versions—
oracle/communications_cloud_native_core_binding_support_functionall versions—
oracle/communications_cloud_native_core_consoleall versions—
oracle/communications_cloud_native_core_network_function_cloud_native_environmentall versions—
oracle/communications_cloud_native_core_network_repository_functionall versions—
oracle/communications_cloud_native_core_policyall versions—
oracle/communications_cloud_native_core_security_edge_protection_proxyall versions—
oracle/communications_cloud_native_core_security_edge_protection_proxyall versions—
oracle/communications_cloud_native_core_security_edge_protection_proxyall versions—
oracle/communications_cloud_native_core_service_communication_proxyall versions—
oracle/communications_cloud_native_core_unified_data_repositoryall versions—
oracle/communications_contacts_serverall versions—
oracle/communications_converged_application_server_-_service_controllerall versions—
oracle/communications_convergenceall versions—
oracle/communications_convergent_charging_controller≥ 12.0.1.0.0, ≤ 12.0.4.0.0—
oracle/communications_convergent_charging_controllerall versions—
oracle/communications_data_modelall versions—
oracle/communications_data_modelall versions—
oracle/communications_data_modelall versions—
oracle/communications_data_modelall versions—
oracle/communications_data_modelall versions—
oracle/communications_design_studioall versions—
oracle/communications_design_studioall versions—
oracle/communications_design_studioall versions—
oracle/communications_design_studioall versions—
oracle/communications_design_studioall versions—
oracle/communications_diameter_signaling_route≥ 8.0.0.0, ≤ 8.5.1.0—
oracle/communications_eagle_application_processor≥ 16.1, ≤ 16.4—
oracle/communications_instant_messaging_serverall versions—
oracle/communications_interactive_session_recorderall versions—
oracle/communications_interactive_session_recorderall versions—
oracle/communications_messaging_serverall versions—
oracle/communications_metasolv_solutionall versions—
oracle/communications_network_charging_and_control≥ 12.0.1.0.0, ≤ 12.0.4.0.0—
oracle/communications_network_charging_and_controlall versions—
oracle/communications_network_integrityall versions—
oracle/communications_network_integrityall versions—
oracle/communications_offline_mediation_controllerall versions—
oracle/communications_operations_monitorall versions—
oracle/communications_operations_monitorall versions—
oracle/communications_operations_monitorall versions—
oracle/communications_operations_monitorall versions—
oracle/communications_operations_monitorall versions—
oracle/communications_pricing_design_centerall versions—
oracle/communications_pricing_design_centerall versions—
oracle/communications_service_brokerall versions—
oracle/communications_services_gatekeeperall versions—
oracle/communications_session_border_controllerall versions—
oracle/communications_session_border_controllerall versions—
oracle/communications_session_border_controllerall versions—
oracle/communications_session_border_controllerall versions—
oracle/primavera_portfolio_managementall versions—
oracle/primavera_portfolio_managementall versions—
oracle/primavera_unifier≥ 17.7, ≤ 17.12—
oracle/primavera_unifierall versions—
oracle/primavera_unifierall versions—
oracle/primavera_unifierall versions—
oracle/primavera_unifierall versions—
oracle/rapid_planning≥ 12.2.6, ≤ 12.2.11—
oracle/real-time_decision_serverall versions—
oracle/real_user_experience_insightall versions—
oracle/real_user_experience_insightall versions—
oracle/rest_data_servicesall versions—
oracle/retail_allocationall versions—
oracle/retail_allocationall versions—
oracle/retail_allocationall versions—
oracle/retail_allocationall versions—
oracle/retail_analytics≥ 16.0.0, ≤ 16.0.2—
oracle/retail_assortment_planningall versions—
oracle/retail_back_officeall versions—
oracle/retail_central_officeall versions—
oracle/retail_customer_insights≥ 16.0.0, ≤ 16.0.2—
oracle/retail_customer_management_and_segmentation_foundation≥ 16.0, ≤ 19.0—
oracle/retail_eftlinkall versions—
oracle/retail_eftlinkall versions—
oracle/retail_eftlinkall versions—
oracle/retail_eftlinkall versions—
oracle/retail_eftlinkall versions—
oracle/retail_extract_transform_and_loadall versions—
oracle/retail_financial_integrationall versions—
oracle/retail_financial_integrationall versions—
oracle/retail_financial_integrationall versions—
oracle/retail_financial_integrationall versions—
oracle/retail_fiscal_managementall versions—
oracle/retail_integration_bus≥ 16.0.1, ≤ 16.0.3—
oracle/retail_integration_busall versions—
oracle/retail_integration_busall versions—
oracle/retail_integration_busall versions—
oracle/retail_integration_busall versions—
oracle/retail_integration_busall versions—
oracle/retail_integration_busall versions—
oracle/retail_invoice_matchingall versions—
oracle/retail_invoice_matchingall versions—
oracle/retail_merchandising_systemall versions—
oracle/retail_order_brokerall versions—
oracle/retail_order_brokerall versions—
oracle/retail_order_brokerall versions—
oracle/retail_order_management_systemall versions—
oracle/retail_point-of-saleall versions—
oracle/retail_predictive_application_serverall versions—
oracle/retail_predictive_application_serverall versions—
oracle/retail_predictive_application_serverall versions—
oracle/retail_predictive_application_serverall versions—
oracle/retail_predictive_application_serverall versions—
oracle/retail_predictive_application_serverall versions—
oracle/retail_price_managementall versions—
oracle/retail_price_managementall versions—
oracle/retail_price_managementall versions—
oracle/retail_price_managementall versions—
oracle/retail_price_managementall versions—
oracle/retail_price_managementall versions—
oracle/retail_price_managementall versions—
oracle/retail_price_managementall versions—
oracle/retail_returns_managementall versions—
oracle/retail_service_backbone≥ 16.0.1, ≤ 16.0.3—
oracle/retail_service_backboneall versions—
oracle/retail_service_backboneall versions—
oracle/retail_service_backboneall versions—
oracle/retail_service_backboneall versions—
oracle/retail_service_backboneall versions—
oracle/retail_size_profile_optimizationall versions—
oracle/retail_xstore_point_of_serviceall versions—
oracle/retail_xstore_point_of_serviceall versions—
oracle/retail_xstore_point_of_serviceall versions—
oracle/retail_xstore_point_of_serviceall versions—
oracle/sd-wan_awareall versions—
oracle/sd-wan_edgeall versions—
oracle/sd-wan_edgeall versions—
oracle/secure_backupall versions—
oracle/siebel_applications< 21.1221.12
oracle/spatial_studioall versions—
oracle/thesaurus_management_systemall versions—
oracle/thesaurus_management_systemall versions—
oracle/thesaurus_management_systemall versions—
oracle/timesten_in-memory_database< 11.2.2.8.2711.2.2.8.27
oracle/timesten_in-memory_database≥ 21.0.0, < 21.1.1.1.021.1.1.1.0
oracle/utilities_framework≥ 4.3.0.1.0, ≤ 4.3.0.6.0—
oracle/utilities_frameworkall versions—
oracle/utilities_frameworkall versions—
oracle/utilities_frameworkall versions—
oracle/utilities_frameworkall versions—
oracle/utilities_frameworkall versions—
oracle/utilities_testing_acceleratorall versions—
oracle/utilities_testing_acceleratorall versions—
oracle/utilities_testing_acceleratorall versions—
oracle/vm_virtualbox< 6.1.326.1.32
oracle/webcenter_portalall versions—
oracle/webcenter_portalall versions—
oracle/weblogic_serverall versions—
oracle/weblogic_serverall versions—
oracle/weblogic_serverall versions—
oracle/weblogic_serverall versions—
oracle/zfs_storage_appliance_kitall versions—
oracle/zfs_storage_application_integration_engineering_softwareall versions—
oracle/communications_messaging_serverall versions—
oracle/solarisall versions—
oracle/solarisall versions—
oracle/enterprise_communications_brokerall versions—
oracle/enterprise_data_qualityall versions—
oracle/enterprise_data_qualityall versions—
oracle/enterprise_manager_base_platformall versions—
oracle/enterprise_manager_base_platformall versions—
oracle/enterprise_manager_ops_centerall versions—
oracle/enterprise_session_border_controllerall versions—
oracle/enterprise_session_border_controllerall versions—
oracle/essbase< 11.1.2.4.4711.1.2.4.47
oracle/essbase≥ 21.0, < 21.321.3
oracle/essbaseall versions—
oracle/essbase_administration_services< 11.1.2.4.4711.1.2.4.47
oracle/essbase_administration_servicesall versions—
oracle/financial_services_analytical_applications_infrastructure≥ 8.0.7, ≤ 8.1.1—
oracle/financial_services_analytical_applications_infrastructureall versions—
oracle/financial_services_behavior_detection_platformall versions—
oracle/financial_services_behavior_detection_platformall versions—
oracle/financial_services_behavior_detection_platformall versions—
oracle/financial_services_enterprise_case_managementall versions—
oracle/financial_services_enterprise_case_managementall versions—
oracle/financial_services_enterprise_case_managementall versions—
oracle/financial_services_foreign_account_tax_compliance_act_managementall versions—
oracle/financial_services_foreign_account_tax_compliance_act_managementall versions—
oracle/financial_services_foreign_account_tax_compliance_act_managementall versions—
oracle/financial_services_model_management_and_governance≥ 8.0.8, ≤ 8.1.1—
oracle/financial_services_trade-based_anti_money_launderingall versions—
oracle/financial_services_trade-based_anti_money_launderingall versions—
oracle/flexcube_investor_servicingall versions—
oracle/flexcube_investor_servicingall versions—
oracle/flexcube_investor_servicingall versions—
oracle/flexcube_investor_servicingall versions—
oracle/flexcube_investor_servicingall versions—
oracle/flexcube_investor_servicingall versions—
oracle/flexcube_private_bankingall versions—
oracle/flexcube_private_bankingall versions—
oracle/fusion_middlewareall versions—
oracle/fusion_middlewareall versions—
oracle/fusion_middleware_mapviewerall versions—
oracle/goldengate< 12.3.0.112.3.0.1
oracle/goldengate≥ 19.0.0, < 19.1.0.0.22011819.1.0.0.220118
oracle/goldengate≥ 21.0.0, < 21.5.0.0.22011821.5.0.0.220118
oracle/goldengate_application_adaptersall versions—
oracle/graalvmall versions—
oracle/graalvmall versions—
oracle/graph_server_and_client< 21.421.4
oracle/health_sciences_clinical_development_analyticsall versions—
oracle/health_sciences_inform_crf_submitall versions—
oracle/health_sciences_information_managerall versions—
oracle/health_sciences_information_managerall versions—
oracle/healthcare_data_repositoryall versions—
oracle/healthcare_data_repositoryall versions—
oracle/healthcare_data_repositoryall versions—
oracle/healthcare_foundation≥ 7.3.0.0, ≤ 7.3.0.2—
oracle/healthcare_foundation≥ 8.0.0, ≤ 8.0.2—
oracle/healthcare_foundationall versions—
oracle/healthcare_foundationall versions—
oracle/healthcare_translational_researchall versions—
oracle/hospitality_cruise_shipboard_property_management_systemall versions—
oracle/hospitality_opera_5_property_servicesall versions—
oracle/hospitality_reporting_and_analyticsall versions—
oracle/hospitality_suite8all versions—
oracle/hospitality_suite8all versions—
oracle/hospitality_suite8all versions—
oracle/hospitality_suite8all versions—
oracle/hospitality_suite8all versions—
oracle/http_serverall versions—
oracle/http_serverall versions—
oracle/hyperion_financial_managementall versions—
oracle/hyperion_financial_managementall versions—
oracle/hyperion_ilearningall versions—
oracle/hyperion_ilearningall versions—
oracle/hyperion_infrastructure_technologyall versions—
oracle/instantis_enterprisetrackall versions—
oracle/instantis_enterprisetrackall versions—
oracle/instantis_enterprisetrackall versions—
oracle/insurance_data_gatewayall versions—
oracle/insurance_data_gatewayall versions—
oracle/insurance_data_gatewayall versions—
oracle/insurance_data_gatewayall versions—
oracle/insurance_data_gatewayall versions—
oracle/insurance_insbridge_rating_and_underwriting≥ 5.4.0, ≤ 5.6.0—
oracle/insurance_insbridge_rating_and_underwritingall versions—
oracle/insurance_policy_administrationall versions—
oracle/insurance_policy_administrationall versions—
oracle/insurance_policy_administrationall versions—
oracle/insurance_policy_administrationall versions—
oracle/insurance_policy_administrationall versions—
oracle/insurance_policy_administration_j2ee≥ 11.1.0, ≤ 11.3.0—
oracle/insurance_policy_administration_j2eeall versions—
oracle/insurance_policy_administration_j2eeall versions—
oracle/insurance_policy_administration_j2eeall versions—
oracle/insurance_rules_palette≥ 11.1.0, ≤ 11.3.0—
oracle/insurance_rules_paletteall versions—
oracle/insurance_rules_paletteall versions—
oracle/insurance_rules_paletteall versions—
oracle/insurance_rules_paletteall versions—
oracle/java_seall versions—
oracle/java_seall versions—
oracle/java_seall versions—
oracle/jd_edwards_enterpriseone_orchestrator< 9.2.6.19.2.6.1
oracle/jdkall versions—
oracle/managed_file_transferall versions—
oracle/managed_file_transferall versions—
oracle/mysql_cluster< 7.4.347.4.34
oracle/mysql_cluster≥ 7.5.0, < 7.5.247.5.24
oracle/mysql_cluster≥ 7.6.0, < 7.6.207.6.20
oracle/mysql_cluster≥ 8.0.0, < 8.0.278.0.27
oracle/mysql_connectors< 8.0.278.0.27
oracle/mysql_connectorsall versions—
oracle/mysql_server< 5.7.365.7.36
oracle/mysql_server≥ 8.0.0, < 8.0.278.0.27
oracle/mysql_serverall versions—
oracle/mysql_workbench< 8.0.278.0.27
oracle/nosql_database< 21.1.1221.1.12
oracle/oss_support_tools< 2.12.422.12.42
oracle/peoplesoft_enterprise_cs_sa_integration_packall versions—
oracle/peoplesoft_enterprise_cs_sa_integration_packall versions—
oracle/peoplesoft_enterprise_peopletoolsall versions—
oracle/peoplesoft_enterprise_peopletoolsall versions—
oracle/peoplesoft_enterprise_peopletoolsall versions—
oracle/policy_automation≥ 12.2.0, ≤ 12.2.24—
oracle/policy_automationall versions—
oracle/primavera_analyticsall versions—
oracle/primavera_analyticsall versions—
oracle/primavera_analyticsall versions—
oracle/primavera_data_warehouseall versions—
oracle/primavera_data_warehouseall versions—
oracle/primavera_data_warehouseall versions—
oracle/primavera_gateway≥ 17.12.0, ≤ 17.12.11—
oracle/primavera_gateway≥ 18.8.0, ≤ 18.8.13—
oracle/primavera_gateway≥ 19.12.0, ≤ 19.12.12—
oracle/primavera_gateway≥ 20.12.0, ≤ 20.12.7—
oracle/primavera_gatewayall versions—
oracle/primavera_p6_enterprise_project_portfolio_management≥ 17.12.0.0, ≤ 17.12.0.0-17.12.20.0—
oracle/primavera_p6_enterprise_project_portfolio_management≥ 18.8.0.0, ≤ 18.8.24.0—
oracle/primavera_p6_enterprise_project_portfolio_management≥ 19.12.0.0, ≤ 19.12.18.0—
oracle/primavera_p6_enterprise_project_portfolio_management≥ 20.12.0.0, ≤ 20.12.12.0—
oracle/primavera_p6_enterprise_project_portfolio_managementall versions—
oracle/primavera_p6_professional_project_management≥ 17.12.0.0, ≤ 17.12.20.0—
oracle/primavera_p6_professional_project_management≥ 18.8.0.0, ≤ 18.8.24.0—
oracle/primavera_p6_professional_project_management≥ 19.12.0.0, ≤ 19.12.17.0—
oracle/primavera_p6_professional_project_management≥ 20.12.0.0, ≤ 20.12.9.0—
oracle/primavera_portfolio_management≥ 18.0.0.0, ≤ 18.0.3.0—
oracle/primavera_portfolio_management≥ 19.0.0.0, ≤ 19.0.1.2—
oracle/fujitsu_m10-1_firmwareall versions—
oracle/fujitsu_m10-4_firmwareall versions—
oracle/fujitsu_m10-4s_firmwareall versions—
oracle/fujitsu_m12-1_firmwareall versions—
oracle/fujitsu_m12-2_firmwareall versions—
oracle/fujitsu_m12-2s_firmwareall versions—
References (36)
https://access.redhat.com/errata/RHSA-2020:0159 · [email protected]https://access.redhat.com/errata/RHSA-2020:0160 · [email protected]https://access.redhat.com/errata/RHSA-2020:0161 · [email protected]https://access.redhat.com/errata/RHSA-2020:0164 · [email protected]https://access.redhat.com/errata/RHSA-2020:0445 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10219 · [email protected]https://github.com/hibernate/hibernate-validator/commit/124b7dd6d9a4ad24d4d49f74701f05a13e56cee · [email protected]https://github.com/hibernate/hibernate-validator/commit/20d729548511ac5cff6fd459f93de137195420fe · [email protected]https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Adapted/CVE-2019-10219 · [email protected]https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Origin/CVE-2019-10219/exploit · [email protected]https://lists.apache.org/thread.html/r4f8b4e2541be4234946e40d55859273a7eec0f4901e8080ce2406fe6%40%3Cnotifications.accumulo.apache.org%3E · [email protected]https://lists.apache.org/thread.html/r4f92d7f7682dcff92722fa947f9e6f8ba2227c5dc3e11ba09114897d%40%3Cnotifications.accumulo.apache.org%3E · [email protected]https://lists.apache.org/thread.html/r87b7e2d22982b4ca9f88f5f4f22a19b394d2662415b233582ed22ebf%40%3Cnotifications.accumulo.apache.org%3E · [email protected]https://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4%40%3Cpluto-scm.portals.apache.org%3E · [email protected]https://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c%40%3Cpluto-dev.portals.apache.org%3E · [email protected]https://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a%40%3Cpluto-dev.portals.apache.org%3E · [email protected]https://security.netapp.com/advisory/ntap-20220210-0024/ · [email protected]https://www.oracle.com/security-alerts/cpujan2022.html · [email protected]https://access.redhat.com/errata/RHSA-2020:0159 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2020:0160 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2020:0161 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2020:0164 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2020:0445 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10219 · af854a3a-2127-422b-91ae-364da2661108https://github.com/hibernate/hibernate-validator/commit/124b7dd6d9a4ad24d4d49f74701f05a13e56ceee · af854a3a-2127-422b-91ae-364da2661108https://github.com/hibernate/hibernate-validator/commit/20d729548511ac5cff6fd459f93de137195420fe · af854a3a-2127-422b-91ae-364da2661108https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Adapted/CVE-2019-10219 · af854a3a-2127-422b-91ae-364da2661108https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Origin/CVE-2019-10219/exploit · af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/r4f8b4e2541be4234946e40d55859273a7eec0f4901e8080ce2406fe6%40%3Cnotifications.accumulo.apache.org%3E · af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/r4f92d7f7682dcff92722fa947f9e6f8ba2227c5dc3e11ba09114897d%40%3Cnotifications.accumulo.apache.org%3E · af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/r87b7e2d22982b4ca9f88f5f4f22a19b394d2662415b233582ed22ebf%40%3Cnotifications.accumulo.apache.org%3E · af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4%40%3Cpluto-scm.portals.apache.org%3E · af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c%40%3Cpluto-dev.portals.apache.org%3E · af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a%40%3Cpluto-dev.portals.apache.org%3E · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20220210-0024/ · af854a3a-2127-422b-91ae-364da2661108https://www.oracle.com/security-alerts/cpujan2022.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 08 NOV 14:46Z
    A vulnerability was found in Hibernate-Validator
    cvelistv5