VDB
BDU%3A2019-04405
BDU%3A2019-04405
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Уязвимость сервера приложений Apache Tomcat, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
9.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Apache Software Foundation | Oracle Transportation Management, Oracle Retail Order Broker, Instantis EnterpriseTrack, MICROS Relate CRM Software, Tomcat, Supply Chain Management |
Timeline
- Dec 3, 2019 CVE Published
- Mar 20, 2026 CVE Updated
References
- https://www.oracle.com/technetwork/topics/security/public-vuln-to-advisory-mapping-093627.html url
- https://nvd.nist.gov/vuln/detail/CVE-2019-0232 url
- https://www.oracle.com/security-alerts/cpuoct2019.html advisory
- https://www.oracle.com/security-alerts/cpujul2019.html advisory
- https://web.archive.org/web/20161228144344/https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/ url