Softwareag

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Softwareag records in CISA KEV

No Softwareag vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mashzone Nextgen 4 records MEDIUM Aris 2 records LOW Connx 2 records LOW Quartz 2 records HIGH Webmethods 2 records MEDIUM Terracotta Server Oss 1 record MEDIUM

Records

2 records in Quartz · all components

TI-2023-20252 CVE-2023-39017 · GHSA-9jc9-7p44-pm6c

quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in…

HIGH 76

quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component org.quartz.jobs.ee.jms.SendQueueMessageJob.execute.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01185 Published 2023-07-28 No fix listed CWE-94

TI-2019-10436 CVE-2019-13990 · GHSA-9qcf-c26r-x5rf

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler…

HIGH 66

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16628 Published 2019-07-26 Partial fix · 2.3.2 CWE-611

Open these records in search →

Critical	5
High	4
Medium	4
Low	0
No CVSS	0