Description
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
CVSS breakdown
CVSS 3.0
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None
Affected products
- Hibernate / Hibernate Validator6.0.0.Alpha1 – 6.0.17.Final
- Hibernate / Hibernate Validator6.1.0.Alpha1 – 6.1.0.Alpha6
- Hibernate / Hibernate Validator6.0.18.Final – 6.0.*
- Hibernate / Hibernate Validator6.1.0.Final – *
- NETAPP / active_iq_unified_manager
- NETAPP / active_iq_unified_manager
- NETAPP / active_iq_unified_manager
- NETAPP / element
- NETAPP / management_services_for_element_software_and_netapp_hci
- NETAPP / snapcenter_plug-in
- oracle / access_manager12.2.1.3.0 – 12.2.1.3.0
- oracle / access_manager12.2.1.4.0 – 12.2.1.4.0
- oracle / access_manager11.1.2.3.0 – 11.1.2.3.0
- oracle / agile_engineering_data_management6.2.1.0 – 6.2.1.0
- oracle / agile_plm9.3.3 – 9.3.3
- oracle / agile_plm9.3.6 – 9.3.6
- oracle / agile_product_lifecycle_analytics3.6.1 – 3.6.1
- oracle / agile_product_lifecycle_management9.3.3 – 9.3.3
- oracle / agile_product_lifecycle_management9.3.6 – 9.3.6
- oracle / agile_product_lifecycle_management_integration_pack3.6 – 3.6
- oracle / airlines_data_model12.1.1.0.0 – 12.1.1.0.0
- oracle / airlines_data_model12.2.0.1.0 – 12.2.0.1.0
- oracle / application_express21.1.4 – 21.1.4
- oracle / application_performance_management13.5.1.0 – 13.5.1.0
- oracle / application_performance_management13.4.1.0 – 13.4.1.0
- oracle / Application Testing Suite13.3.0.1 – 13.3.0.1
- oracle / argus_analytics8.2.1 – 8.2.1
- oracle / argus_analytics8.21 – 8.21
- oracle / argus_analytics8.2.3 – 8.2.3
- oracle / argus_analytics8.2.2 – 8.2.2
- oracle / argus_insight8.2.3 – 8.2.3
- oracle / argus_insight8.2.2 – 8.2.2
- oracle / argus_insight8.2.1 – 8.2.1
- oracle / argus_safety8.2.2 – 8.2.2
- oracle / argus_safety8.2.1 – 8.2.1
- oracle / argus_safety8.2.3 – 8.2.3
- oracle / banking_apis21.1 – 21.1
- oracle / banking_apis18.1 – 18.1
- oracle / banking_apis18.2 – 18.2
- oracle / banking_apis19.1 – 19.1
- oracle / banking_apis18.3 – 18.3
- oracle / banking_apis19.2 – 19.2
- oracle / banking_apis20.1 – 20.1
- oracle / banking_deposits_and_lines_of_credit_servicing2.12.0 – 2.12.0
- oracle / banking_digital_experience18.3 – 18.3
- oracle / banking_digital_experience18.1 – 18.1
- oracle / banking_digital_experience17.2 – 17.2
- oracle / banking_digital_experience21.1 – 21.1
- oracle / banking_digital_experience20.1 – 20.1
- oracle / banking_digital_experience19.2 – 19.2
- oracle / banking_digital_experience19.1 – 19.1
- oracle / banking_enterprise_default_management2.7.1 – 2.7.1
- oracle / banking_enterprise_default_management2.10.0 – 2.10.0
- oracle / banking_enterprise_default_management2.12.0 – 2.12.0
- oracle / banking_enterprise_default_management2.7.0 – 2.7.0
- oracle / banking_enterprise_default_management2.6.2 – 2.6.2
- oracle / banking_enterprise_default_managment2.3.0 – 2.4.0
- oracle / banking_loans_servicing2.12.0 – 2.12.0
- oracle / banking_party_management2.7.0 – 2.7.0
- oracle / banking_platform2.3.0 – 2.4.1
- oracle / banking_platform2.7.1 – 2.7.1
- oracle / banking_platform2.6.2 – 2.6.2
- oracle / banking_platform2.7.0 – 2.7.0
- oracle / big_data_spatial_and_graph23.1 – 23.1
- oracle / bi_publisher5.5.0.0.0 – 5.5.0.0.0
- oracle / bi_publisher11.1.1.9.0 – 11.1.1.9.0
- oracle / bi_publisher12.2.1.3.0 – 12.2.1.3.0
- oracle / bi_publisher12.2.1.4.0 – 12.2.1.4.0
- oracle / business_activity_monitoring12.2.1.4.0 – 12.2.1.4.0
- oracle / business_intelligence12.2.1.3.0 – 12.2.1.3.0
- oracle / business_intelligence5.9.0.0.0 – 5.9.0.0.0
- oracle / business_intelligence5.5.0.0.0 – 5.5.0.0.0
- oracle / business_intelligence12.2.1.4.0 – 12.2.1.4.0
- oracle / business_process_management_suite12.2.1.3.0 – 12.2.1.3.0
- oracle / business_process_management_suite12.2.1.4.0 – 12.2.1.4.0
- oracle / clinical5.2.2 – 5.2.2
- oracle / clinical5.2.1 – 5.2.1
- oracle / commerce_guided_search11.3.2 – 11.3.2
- oracle / commerce_platform11.3.0 – 11.3.2
- oracle / communications_application_session_controller3.9.0 – 3.9.0
- oracle / communications_billing_and_revenue_management12.0.0.4 – 12.0.0.4
- oracle / communications_billing_and_revenue_management12.0.0.3 – 12.0.0.3
- oracle / communications_billing_and_revenue_management_elastic_charging_engine12.0 – 12.0
- oracle / communications_billing_and_revenue_management_elastic_charging_engine11.3 – 11.3
- oracle / communications_calendar_server8.0.0.5.0 – 8.0.0.5.0
- oracle / communications_calendar_server8.0.0.6.0 – 8.0.0.6.0
- oracle / communications_cloud_native_core_automated_test_suite1.8.0 – 1.8.0
- oracle / communications_cloud_native_core_binding_support_function1.10.0 – 1.10.0
- oracle / communications_cloud_native_core_binding_support_function1.9.0 – 1.9.0
- oracle / communications_cloud_native_core_console1.7.0 – 1.7.0
- oracle / communications_cloud_native_core_network_function_cloud_native_environment1.9.0 – 1.9.0
- oracle / communications_cloud_native_core_network_repository_function1.14.0 – 1.14.0
- oracle / communications_cloud_native_core_policy1.14.0 – 1.14.0
- oracle / communications_cloud_native_core_security_edge_protection_proxy1.6.0 – 1.6.0
- oracle / communications_cloud_native_core_security_edge_protection_proxy1.5.0 – 1.5.0
- oracle / communications_cloud_native_core_security_edge_protection_proxy1.15.0 – 1.15.0
- oracle / communications_cloud_native_core_service_communication_proxy1.14.0 – 1.14.0
- oracle / communications_cloud_native_core_unified_data_repository1.14.0 – 1.14.0
- oracle / communications_contacts_server8.0.0.3.0 – 8.0.0.3.0
- oracle / communications_converged_application_server_-_service_controller6.2 – 6.2
- oracle / communications_convergence3.0.2.2.0 – 3.0.2.2.0
- oracle / communications_convergent_charging_controller6.0.1.0.0 – 6.0.1.0.0
- oracle / communications_convergent_charging_controller12.0.1.0.0 – 12.0.4.0.0
- oracle / communications_data_model11.3.2.2.0 – 11.3.2.2.0
- oracle / communications_data_model11.3.2.3.0 – 11.3.2.3.0
- oracle / communications_data_model12.1.0.1.0 – 12.1.0.1.0
- oracle / communications_data_model12.1.2.0.0 – 12.1.2.0.0
- oracle / communications_data_model11.3.2.1.0 – 11.3.2.1.0
- oracle / communications_design_studio7.3.5 – 7.3.5
- oracle / communications_design_studio7.4.0 – 7.4.0
- oracle / communications_design_studio7.4.1 – 7.4.1
- oracle / communications_design_studio7.4.2 – 7.4.2
- oracle / communications_design_studio7.3.4 – 7.3.4
- oracle / communications_diameter_signaling_route8.0.0.0 – 8.5.1.0
- oracle / communications_eagle_application_processor16.1 – 16.4
- oracle / communications_instant_messaging_server10.0.1.5.0 – 10.0.1.5.0
- oracle / communications_interactive_session_recorder6.4 – 6.4
- oracle / communications_interactive_session_recorder6.3 – 6.3
- oracle / communications_messaging_server8.1 – 8.1
- oracle / communications_messaging_server8.1 – 8.1
- oracle / communications_metasolv_solution6.3.1 – 6.3.1
- oracle / communications_network_charging_and_control12.0.1.0.0 – 12.0.4.0.0
- oracle / communications_network_charging_and_control6.0.1.0.0 – 6.0.1.0.0
- oracle / communications_network_integrity7.3.6 – 7.3.6
- oracle / communications_network_integrity7.3.5 – 7.3.5
- oracle / communications_offline_mediation_controller12.0.0.3 – 12.0.0.3
- oracle / communications_operations_monitor4.2 – 4.2
- oracle / communications_operations_monitor4.4 – 4.4
- oracle / communications_operations_monitor3.4 – 3.4
- oracle / communications_operations_monitor5.0 – 5.0
- oracle / communications_operations_monitor4.3 – 4.3
- oracle / communications_pricing_design_center12.0.0.3.0 – 12.0.0.3.0
- oracle / communications_pricing_design_center12.0.0.4.0 – 12.0.0.4.0
- oracle / communications_service_broker6.2 – 6.2
- oracle / communications_services_gatekeeper7.0 – 7.0
- oracle / communications_session_border_controller8.4 – 8.4
- oracle / communications_session_border_controller8.3 – 8.3
- oracle / communications_session_border_controller8.2 – 8.2
- oracle / communications_session_border_controller9.0 – 9.0
- oracle / communications_unified_inventory_management7.3.5 – 7.3.5
- oracle / communications_unified_inventory_management7.5.0 – 7.5.0
- oracle / communications_unified_inventory_management7.4.2 – 7.4.2
- oracle / communications_unified_inventory_management7.4.1 – 7.4.1
- oracle / communications_unified_inventory_management7.4.0 – 7.4.0
- oracle / communications_unified_inventory_management7.3.0 – 7.3.0
- oracle / communications_unified_inventory_management7.3.4 – 7.3.4
- oracle / communications_webrtc_session_controller7.2.0 – 7.2.0
- oracle / communications_webrtc_session_controller7.2.1 – 7.2.1
- oracle / database_server19c – 19c
- oracle / database_server21c – 21c
- oracle / database_server12.1.0.1 – 12.1.0.1
- oracle / database_server12.1.0.2 – 12.1.0.2
- oracle / data_integrator12.2.1.3.0 – 12.2.1.3.0
- oracle / data_integrator12.2.1.4.0 – 12.2.1.4.0
- oracle / demantra_demand_management12.2.6 – 12.2.11
- oracle / documaker12.6.0 – 12.6.4
- oracle / e-business_suite12.2.3 – 12.2.11
- oracle / enterprise_communications_broker3.3 – 3.3
- oracle / enterprise_data_quality12.2.1.3.0 – 12.2.1.3.0
- oracle / enterprise_data_quality12.2.1.4.0 – 12.2.1.4.0
- oracle / enterprise_manager_base_platform13.4.0.0 – 13.4.0.0
- oracle / enterprise_manager_base_platform13.5.0.0 – 13.5.0.0
- oracle / enterprise_manager_ops_center12.4.0.0 – 12.4.0.0
- oracle / enterprise_session_border_controller9.0 – 9.0
- oracle / enterprise_session_border_controller8.4 – 8.4
- oracle / essbase11.1.2.4.47 – 11.1.2.4.47
- oracle / essbase11.1.2.4.47
- oracle / essbase_administration_services11.1.2.4.47 – 11.1.2.4.47
- oracle / essbase_administration_services11.1.2.4.47
- oracle / financial_services_analytical_applications_infrastructure7.3.3 – 7.3.3
- oracle / financial_services_analytical_applications_infrastructure8.0.7 – 8.1.1
- oracle / financial_services_behavior_detection_platform8.0.11 – 8.0.11
- oracle / financial_services_behavior_detection_platform8.0.8 – 8.0.8
- oracle / financial_services_behavior_detection_platform8.0.7 – 8.0.7
- oracle / financial_services_enterprise_case_management8.0.7 – 8.0.7
- oracle / financial_services_enterprise_case_management8.0.11 – 8.0.11
- oracle / financial_services_enterprise_case_management8.0.8 – 8.0.8
- oracle / financial_services_foreign_account_tax_compliance_act_management8.0.7 – 8.0.7
- oracle / financial_services_foreign_account_tax_compliance_act_management8.0.8 – 8.0.8
- oracle / financial_services_foreign_account_tax_compliance_act_management8.0.11 – 8.0.11
- oracle / financial_services_model_management_and_governance8.0.8 – 8.1.1
- oracle / financial_services_trade-based_anti_money_laundering8.0.8 – 8.0.8
- oracle / financial_services_trade-based_anti_money_laundering8.0.7 – 8.0.7
- oracle / FLEXCUBE Investor Servicing14.5.0 – 14.5.0
- oracle / FLEXCUBE Investor Servicing12.1.0 – 12.1.0
- oracle / FLEXCUBE Investor Servicing12.4.0 – 12.4.0
- oracle / FLEXCUBE Investor Servicing12.0.4 – 12.0.4
- oracle / FLEXCUBE Investor Servicing12.3.0 – 12.3.0
- oracle / FLEXCUBE Investor Servicing14.4.0 – 14.4.0
- oracle / FLEXCUBE Private Banking12.1.0 – 12.1.0
- oracle / FLEXCUBE Private Banking12.0.0 – 12.0.0
- oracle / fujitsu_m10-1_firmware
- oracle / fujitsu_m10-4_firmware
- oracle / fujitsu_m10-4s_firmware
- oracle / fujitsu_m12-1_firmware
- oracle / fujitsu_m12-2_firmware
- oracle / fujitsu_m12-2s_firmware
- oracle / fusion_middleware12.2.1.4.0 – 12.2.1.4.0
- oracle / fusion_middleware12.2.1.3.0 – 12.2.1.3.0
- oracle / fusion_middleware_mapviewer12.2.1.4.0 – 12.2.1.4.0
- oracle / goldengate12.3.0.1
- oracle / goldengate_application_adapters19.1.0.0.0 – 19.1.0.0.0
- oracle / graalvm21.3.0 – 21.3.0
- oracle / graalvm20.3.4 – 20.3.4
- oracle / graph_server_and_client21.4
- oracle / healthcare_data_repository8.1.0 – 8.1.0
- oracle / healthcare_data_repository8.1.1 – 8.1.1
- oracle / healthcare_data_repository7.0.2 – 7.0.2
- oracle / healthcare_foundation8.1.0 – 8.1.0
- oracle / healthcare_foundation8.1.1 – 8.1.1
- oracle / healthcare_foundation7.3.0.0 – 7.3.0.2
- oracle / healthcare_translational_research4.1.0 – 4.1.0
- oracle / health_sciences_clinical_development_analytics4.0.1 – 4.0.1
- oracle / health_sciences_information_manager3.0.3 – 3.0.3
- oracle / health_sciences_information_manager3.0.2 – 3.0.2
- oracle / health_sciences_inform_crf_submit6.2.1 – 6.2.1
- oracle / hospitality_cruise_shipboard_property_management_system20.1.0 – 20.1.0
- oracle / hospitality_opera_5_property_services5.6 – 5.6
- oracle / hospitality_reporting_and_analytics9.1.0 – 9.1.0
- oracle / hospitality_suite88.12.0 – 8.12.0
- oracle / hospitality_suite88.10.2 – 8.10.2
- oracle / hospitality_suite88.11.0 – 8.11.0
- oracle / hospitality_suite88.13.0 – 8.13.0
- oracle / hospitality_suite88.14.0 – 8.14.0
- oracle / http_server12.2.1.3.0 – 12.2.1.3.0
- oracle / http_server12.2.1.4.0 – 12.2.1.4.0
- oracle / hyperion_financial_management11.2.6.0 – 11.2.6.0
- oracle / hyperion_financial_management11.1.2.4 – 11.1.2.4
- oracle / hyperion_ilearning6.3 – 6.3
- oracle / hyperion_ilearning6.2 – 6.2
- oracle / hyperion_infrastructure_technology11.2.7.0 – 11.2.7.0
- oracle / instantis_enterprisetrack17.2 – 17.2
- oracle / instantis_enterprisetrack17.3 – 17.3
- oracle / instantis_enterprisetrack17.1 – 17.1
- oracle / insurance_data_gateway11.2.7 – 11.2.7
- oracle / insurance_data_gateway11.3.0 – 11.3.0
- oracle / insurance_data_gateway11.3.1 – 11.3.1
- oracle / insurance_data_gateway11.0.2 – 11.0.2
- oracle / insurance_data_gateway11.1.0 – 11.1.0
- oracle / insurance_insbridge_rating_and_underwriting5.4.0 – 5.6.0
- oracle / insurance_insbridge_rating_and_underwriting5.2.0 – 5.2.0
- oracle / insurance_policy_administration11.2.7 – 11.2.7
- oracle / insurance_policy_administration11.0.2 – 11.0.2
- oracle / insurance_policy_administration11.1.0 – 11.1.0
- oracle / insurance_policy_administration11.3.0 – 11.3.0
- oracle / insurance_policy_administration11.3.1 – 11.3.1
- oracle / insurance_policy_administration_j2ee11.1.0 – 11.3.0
- oracle / insurance_policy_administration_j2ee11.0.2 – 11.0.2
- oracle / insurance_policy_administration_j2ee10.2.4 – 10.2.4
- oracle / insurance_policy_administration_j2ee10.2.0 – 10.2.0
- oracle / insurance_rules_palette11.3.1 – 11.3.1
- oracle / insurance_rules_palette11.1.0 – 11.3.0
- oracle / insurance_rules_palette10.2.0 – 10.2.0
- oracle / insurance_rules_palette10.2.4 – 10.2.4
- oracle / insurance_rules_palette11.0.2 – 11.0.2
- oracle / java_se7u321 – 7u321
- oracle / java_se8u311 – 8u311
- oracle / java_se17.1 – 17.1
- oracle / jd_edwards_enterpriseone_orchestrator9.2.6.1
- oracle / jdk11.0.13 – 11.0.13
- oracle / managed_file_transfer12.2.1.4.0 – 12.2.1.4.0
- oracle / managed_file_transfer12.2.1.3.0 – 12.2.1.3.0
- oracle / mysql_cluster7.4.34
- oracle / mysql_connectors8.0.27 – 8.0.27
- oracle / mysql_connectors8.0.27
- oracle / mysql_server5.7.36
- oracle / mysql_server5.7.36 – 5.7.36
- oracle / mysql_workbench8.0.27
- oracle / nosql_database21.1.12
- oracle / oss_support_tools2.12.42
- oracle / peoplesoft_enterprise_cs_sa_integration_pack9.0 – 9.0
- oracle / peoplesoft_enterprise_cs_sa_integration_pack9.2 – 9.2
- oracle / peoplesoft_enterprise_peopletools8.58 – 8.58
- oracle / peoplesoft_enterprise_peopletools8.59 – 8.59
- oracle / peoplesoft_enterprise_peopletools8.57 – 8.57
- oracle / policy_automation12.2.0 – 12.2.24
- oracle / policy_automation10.4.7 – 10.4.7
- oracle / primavera_analytics20.12.12.0 – 20.12.12.0
- oracle / primavera_analytics18.8.3.3 – 18.8.3.3
- oracle / primavera_analytics19.12.11.1 – 19.12.11.1
- oracle / primavera_data_warehouse18.8.3.3 – 18.8.3.3
- oracle / primavera_data_warehouse19.12.11.1 – 19.12.11.1
- oracle / primavera_data_warehouse20.12.12.0 – 20.12.12.0
- oracle / primavera_gateway17.12.0 – 17.12.11
- oracle / primavera_gateway21.12.0 – 21.12.0
- oracle / primavera_p6_enterprise_project_portfolio_management17.12.0.0 – 17.12.0.0-17.12.20.0
- oracle / primavera_p6_enterprise_project_portfolio_management21.12.0.0 – 21.12.0.0
- oracle / primavera_p6_professional_project_management17.12.0.0 – 17.12.20.0
- oracle / primavera_portfolio_management20.0.0.1 – 20.0.0.1
- oracle / primavera_portfolio_management18.0.0.0 – 18.0.3.0
- oracle / primavera_portfolio_management20.0.0.0 – 20.0.0.0
- oracle / primavera_unifier18.8 – 18.8
- oracle / primavera_unifier17.7 – 17.12
- oracle / primavera_unifier19.12 – 19.12
- oracle / primavera_unifier20.12 – 20.12
- oracle / primavera_unifier21.12 – 21.12
- oracle / rapid_planning12.2.6 – 12.2.11
- oracle / real-time_decision_server3.2.0.0 – 3.2.0.0
- oracle / real_user_experience_insight13.4.1.0 – 13.4.1.0
- oracle / real_user_experience_insight13.5.1.0 – 13.5.1.0
- oracle / rest_data_services21.2.4 – 21.2.4
- oracle / retail_allocation19.0.1 – 19.0.1
- oracle / retail_allocation14.1.3.2 – 14.1.3.2
- oracle / retail_allocation15.0.3.1 – 15.0.3.1
- oracle / retail_allocation16.0.3 – 16.0.3
- oracle / retail_analytics16.0.0 – 16.0.2
- oracle / retail_assortment_planning16.0.3 – 16.0.3
- oracle / retail_back_office14.1 – 14.1
- oracle / retail_central_office14.1 – 14.1
- oracle / retail_customer_insights16.0.0 – 16.0.2
- oracle / retail_customer_management_and_segmentation_foundation16.0 – 19.0
- oracle / retail_eftlink17.0.2 – 17.0.2
- oracle / retail_eftlink18.0.1 – 18.0.1
- oracle / retail_eftlink19.0.1 – 19.0.1
- oracle / retail_eftlink20.0.1 – 20.0.1
- oracle / retail_eftlink16.0.3 – 16.0.3
- oracle / retail_extract_transform_and_load13.2.8 – 13.2.8
- oracle / retail_financial_integration14.1.3.2 – 14.1.3.2
- oracle / retail_financial_integration15.0.3.1 – 15.0.3.1
- oracle / retail_financial_integration16.0.3 – 16.0.3
- oracle / retail_financial_integration19.0.1 – 19.0.1
- oracle / retail_fiscal_management14.2 – 14.2
- oracle / retail_integration_bus14.1.3.2 – 14.1.3.2
- oracle / retail_integration_bus19.0.1 – 19.0.1
- oracle / retail_integration_bus19.0.0 – 19.0.0
- oracle / retail_integration_bus14.1.3.0 – 14.1.3.0
- oracle / retail_integration_bus15.0.3.1 – 15.0.3.1
- oracle / retail_integration_bus16.0.1 – 16.0.3
- oracle / retail_integration_bus13.0 – 13.0
- oracle / retail_invoice_matching15.0.3 – 15.0.3
- oracle / retail_invoice_matching16.0.3 – 16.0.3
- oracle / retail_merchandising_system19.0.1 – 19.0.1
- oracle / retail_order_broker19.1 – 19.1
- oracle / retail_order_broker18.0 – 18.0
- oracle / retail_order_broker16.0 – 16.0
- oracle / retail_order_management_system19.5 – 19.5
- oracle / retail_point-of-sale14.1 – 14.1
- oracle / retail_predictive_application_server14.1.3 – 14.1.3
- oracle / retail_predictive_application_server15.0.3.115 – 15.0.3.115
- oracle / retail_predictive_application_server16.0.3 – 16.0.3
- oracle / retail_predictive_application_server16.0.3.240 – 16.0.3.240
- oracle / retail_predictive_application_server14.1.3.46 – 14.1.3.46
- oracle / retail_predictive_application_server15.0.3 – 15.0.3
- oracle / retail_price_management15.0.3 – 15.0.3
- oracle / retail_price_management13.2 – 13.2
- oracle / retail_price_management14.0.4 – 14.0.4
- oracle / retail_price_management14.1 – 14.1
- oracle / retail_price_management14.1.3 – 14.1.3
- oracle / retail_price_management15.0 – 15.0
- oracle / retail_price_management16.0 – 16.0
- oracle / retail_price_management16.0.3 – 16.0.3
- oracle / retail_returns_management14.1 – 14.1
- oracle / retail_service_backbone19.0.1 – 19.0.1
- oracle / retail_service_backbone19.0.0 – 19.0.0
- oracle / retail_service_backbone14.1.3.0 – 14.1.3.0
- oracle / retail_service_backbone14.1.3.2 – 14.1.3.2
- oracle / retail_service_backbone16.0.1 – 16.0.3
- oracle / retail_service_backbone15.0.3.1 – 15.0.3.1
- oracle / retail_size_profile_optimization16.0.3 – 16.0.3
- oracle / retail_xstore_point_of_service18.0.3 – 18.0.3
- oracle / retail_xstore_point_of_service19.0.2 – 19.0.2
- oracle / retail_xstore_point_of_service20.0.1 – 20.0.1
- oracle / retail_xstore_point_of_service17.0.4 – 17.0.4
- oracle / sd-wan_aware8.2 – 8.2
- oracle / sd-wan_edge9.1 – 9.1
- oracle / sd-wan_edge9.0 – 9.0
- oracle / secure_backup18.1.0.1.0 – 18.1.0.1.0
- oracle / siebel_applications21.12
- oracle / solaris10 – 10
- oracle / solaris11 – 11
- oracle / spatial_studio21.2.1 – 21.2.1
- oracle / thesaurus_management_system5.2.3 – 5.2.3
- oracle / thesaurus_management_system5.3.1 – 5.3.1
- oracle / thesaurus_management_system5.3.0 – 5.3.0
- oracle / timesten_in-memory_database11.2.2.8.27
- oracle / utilities_framework4.2.0.2.0 – 4.2.0.2.0
- oracle / utilities_framework4.3.0.1.0 – 4.3.0.6.0
- oracle / utilities_framework4.2.0.3.0 – 4.2.0.3.0
- oracle / utilities_framework4.4.0.0.0 – 4.4.0.0.0
- oracle / utilities_framework4.4.0.2.0 – 4.4.0.2.0
- oracle / utilities_framework4.4.0.3.0 – 4.4.0.3.0
- oracle / utilities_testing_accelerator6.0.0.1.1 – 6.0.0.1.1
- oracle / utilities_testing_accelerator6.0.0.2.2 – 6.0.0.2.2
- oracle / utilities_testing_accelerator6.0.0.3.1 – 6.0.0.3.1
- oracle / vm_virtualbox6.1.32
- oracle / webcenter_portal12.2.1.4.0 – 12.2.1.4.0
- oracle / webcenter_portal12.2.1.3.0 – 12.2.1.3.0
- oracle / weblogic_server14.1.1.0.0 – 14.1.1.0.0
- oracle / weblogic_server12.1.3.0.0 – 12.1.3.0.0
- oracle / weblogic_server12.2.1.3.0 – 12.2.1.3.0
- oracle / weblogic_server12.2.1.4.0 – 12.2.1.4.0
- oracle / zfs_storage_appliance_kit8.8 – 8.8
- oracle / zfs_storage_application_integration_engineering_software1.3.3 – 1.3.3
- RedHat / fuse1.0 – 1.0
- RedHat / hibernate_validator6.1.0 – 6.1.0
- RedHat / hibernate_validator6.1.0 – 6.1.0
- RedHat / hibernate_validator6.1.0 – 6.1.0
- RedHat / hibernate_validator6.0.18
- RedHat / hibernate_validator6.1.0 – 6.1.0
- RedHat / hibernate_validator6.1.0 – 6.1.0
- RedHat / hibernate_validator6.1.0 – 6.1.0
- RedHat / jboss_data_grid
- RedHat / jboss_enterprise_application_platform7.2 – 7.2
- RedHat / jboss_enterprise_application_platform
- RedHat / jboss_enterprise_application_platform7.3 – 7.3
- RedHat / openshift_application_runtimes
- RedHat / single_sign-on
References
- MAILING_LISThttps://lists.apache.org/thread.html/r87b7e2d22982b4ca9f88f5f4f22a19b394d2662415b233582ed22ebf%40%3Cnotifications.accumulo.apache.org%3E
- MAILING_LISThttps://lists.apache.org/thread.html/r4f8b4e2541be4234946e40d55859273a7eec0f4901e8080ce2406fe6%40%3Cnotifications.accumulo.apache.org%3E
- MAILING_LISThttps://lists.apache.org/thread.html/r4f92d7f7682dcff92722fa947f9e6f8ba2227c5dc3e11ba09114897d%40%3Cnotifications.accumulo.apache.org%3E
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2020:0164
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2020:0159
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2020:0160
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2020:0161
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2020:0445
- MAILING_LISThttps://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a%40%3Cpluto-dev.portals.apache.org%3E
- MAILING_LISThttps://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c%40%3Cpluto-dev.portals.apache.org%3E
- MAILING_LISThttps://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4%40%3Cpluto-scm.portals.apache.org%3E
- VENDOR_ADVISORYhttps://www.oracle.com/security-alerts/cpujan2022.html
- PATCHhttps://github.com/hibernate/hibernate-validator/commit/20d729548511ac5cff6fd459f93de137195420fe
- PATCHhttps://github.com/hibernate/hibernate-validator/commit/124b7dd6d9a4ad24d4d49f74701f05a13e56cee
- MISChttps://github.com/poc-effectiveness/PoCAdaptation/tree/main/Adapted/CVE-2019-10219
- MISChttps://github.com/poc-effectiveness/PoCAdaptation/tree/main/Origin/CVE-2019-10219/exploit
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10219
- MISChttps://security.netapp.com/advisory/ntap-20220210-0024/
Updated 18m ago · 8 sources