VDB
BDU%3A2020-02137
BDU%3A2020-02137
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции initDocumentParser библиотеки планирования заданий Terracotta Quartz Scheduler, позволяющая нарушителю осуществить XXE-атаку
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Red Hat Inc., ООО «РусБИТех-Астра», Novell Inc., Terracotta, Inc., АО "НППКТ" | Retail Back Office, Retail Central Office, Retail Returns Management, Retail Point-of-Service, Fusion Middleware MapViewer, Primavera Unifier, Red Hat Virtualization, Oracle Retail Order Broker, Astra Linux Common Edition (запись в едином реестре российских программ №4433), Jboss Fuse, Red Hat Process Automation Manager, Red Hat Descision Manager, SUSE Linux Enterprise Module for SUSE Manager Server, SUSE Manager Server, Banking Enterprise Product Manufacturing, Oracle Banking Enterprise Originations, Quartz Scheduler, Enterprise Manager Ops Center, Oracle Communications Session Route Manager, Enterprise Manager Base Platform, Hyperion Infrastructure Technology, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913) |
Timeline
- May 15, 2020 CVE Published
- Oct 17, 2022 CVE Updated
References
- https://nvd.nist.gov/vuln/detail/CVE-2019-13990 url
- https://github.com/quartz-scheduler/quartz/issues/467 url
- https://www.suse.com/security/cve/CVE-2019-13990/ url
- https://access.redhat.com/security/cve/CVE-2019-13990 url
- https://www.oracle.com/security-alerts/cpuoct2020.html url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.4.2/ url
- https://www.oracle.com/security-alerts/cpuapr2020.html advisory
- https://www.oracle.com/security-alerts/cpujan2021.html advisory