Read the docs
TI-2019-10436 Aliases CVE-2019-13990GHSA-9qcf-c26r-x5rf

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler…

Priority HIGH 66CWE-611Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 4 fixed, 3 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, GitHub and Red Hat.

Summary

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.16628 97th percentileScored 2026-11-07
Fix Partial org.quartz-scheduler:quartz (Maven): 2.3.2Red Hat: 4 advisoriesRed Hat: 4 fixed, 3 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—org.quartz-scheduler:quartz (Maven)before 2.3.22.3.2Patch availableGHSA-9qcf-c26r-x5rf
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • org.quartz-scheduler:quartz (Maven) Vendor— Affected before 2.3.2 Fixed in 2.3.2 Patch available GHSA-9qcf-c26r-x5rf

CPE configurations NVD · 180

CPEVersionsRoleVendor
cpe:2.3:a:softwareag:quartz:*:*:*:*:*:*:*:*before 2.3.2VulnerableSoftwareag
cpe:2.3:a:oracle:apache_batik_mapviewer:12.2.0.1:*:*:*:*:*:*:*12.2.0.1VulnerableOracle
cpe:2.3:a:oracle:apache_batik_mapviewer:18c:*:*:*:*:*:*:*18cVulnerableOracle
cpe:2.3:a:oracle:apache_batik_mapviewer:19c:*:*:*:*:*:*:*19cVulnerableOracle
cpe:2.3:a:oracle:banking_enterprise_originations:2.7.0:*:*:*:*:*:*:*2.7.0VulnerableOracle
cpe:2.3:a:oracle:banking_enterprise_originations:2.8.0:*:*:*:*:*:*:*2.8.0VulnerableOracle
cpe:2.3:a:oracle:banking_enterprise_product_manufacturing:2.7.0:*:*:*:*:*:*:*2.7.0VulnerableOracle
cpe:2.3:a:oracle:banking_enterprise_product_manufacturing:2.8.0:*:*:*:*:*:*:*2.8.0VulnerableOracle
cpe:2.3:a:oracle:banking_payments:*:*:*:*:*:*:*:*14.1.0 – 14.4.0VulnerableOracle
cpe:2.3:a:oracle:communications_ip_service_activator:7.3.0:*:*:*:*:*:*:*7.3.0VulnerableOracle
  • cpe:2.3:a:softwareag:quartz:*:*:*:*:*:*:*:* Versions before 2.3.2 Vulnerable ·Softwareag
  • cpe:2.3:a:oracle:apache_batik_mapviewer:12.2.0.1:*:*:*:*:*:*:* Versions 12.2.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:apache_batik_mapviewer:18c:*:*:*:*:*:*:* Versions 18c Vulnerable ·Oracle
  • cpe:2.3:a:oracle:apache_batik_mapviewer:19c:*:*:*:*:*:*:* Versions 19c Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_enterprise_originations:2.7.0:*:*:*:*:*:*:* Versions 2.7.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_enterprise_originations:2.8.0:*:*:*:*:*:*:* Versions 2.8.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_enterprise_product_manufacturing:2.7.0:*:*:*:*:*:*:* Versions 2.7.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_enterprise_product_manufacturing:2.8.0:*:*:*:*:*:*:* Versions 2.8.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_payments:*:*:*:*:*:*:*:* Versions 14.1.0 – 14.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_ip_service_activator:7.3.0:*:*:*:*:*:*:* Versions 7.3.0 Vulnerable ·Oracle
Show 170 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:*7.4.0VulnerableOracle
cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*8.2.0 – 8.2.2VulnerableOracle
cpe:2.3:a:oracle:customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:*18.0VulnerableOracle
cpe:2.3:a:oracle:documaker:*:*:*:*:*:*:*:*12.6.0 – 12.6.4VulnerableOracle
cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.1.0:*:*:*:*:*:*:*13.2.1.0VulnerableOracle
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*12.4.0.0VulnerableOracle
cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:*12.1.0VulnerableOracle
cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:*12.3.0VulnerableOracle
cpe:2.3:a:oracle:flexcube_investor_servicing:12.4.0:*:*:*:*:*:*:*12.4.0VulnerableOracle
cpe:2.3:a:oracle:flexcube_investor_servicing:14.1.0:*:*:*:*:*:*:*14.1.0VulnerableOracle
cpe:2.3:a:oracle:flexcube_investor_servicing:14.4.0:*:*:*:*:*:*:*14.4.0VulnerableOracle
cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*12.0.0VulnerableOracle
cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*12.1.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:google_guava_mapviewer:12.2.0.1:*:*:*:*:*:*:*12.2.0.1VulnerableOracle
cpe:2.3:a:oracle:google_guava_mapviewer:18c:*:*:*:*:*:*:*18cVulnerableOracle
cpe:2.3:a:oracle:google_guava_mapviewer:19c:*:*:*:*:*:*:*19cVulnerableOracle
cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*11.1.2.4VulnerableOracle
cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:*up to 9.2.5.3VulnerableOracle
cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*17.7 – 17.12VulnerableOracle
cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*16.1VulnerableOracle
cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*16.2VulnerableOracle
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*18.8VulnerableOracle
cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:*14.1VulnerableOracle
cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:*14.1VulnerableOracle
cpe:2.3:a:oracle:retail_integration_bus:15.0:*:*:*:*:*:*:*15.0VulnerableOracle
cpe:2.3:a:oracle:retail_integration_bus:16.0:*:*:*:*:*:*:*16.0VulnerableOracle
cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*15.0VulnerableOracle
cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:*16.0VulnerableOracle
cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:*18.0VulnerableOracle
cpe:2.3:a:oracle:retail_order_broker:19.0:*:*:*:*:*:*:*19.0VulnerableOracle
cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:*14.1VulnerableOracle
cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:*14.1VulnerableOracle
cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*15.0VulnerableOracle
cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:*16.0VulnerableOracle
cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:*17.0VulnerableOracle
cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0:*:*:*:*:*:*:*18.0VulnerableOracle
cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0:*:*:*:*:*:*:*19.0VulnerableOracle
cpe:2.3:a:oracle:terracotta_quartz_scheduler_mapviewer:12.2.0.1:*:*:*:*:*:*:*12.2.0.1VulnerableOracle
cpe:2.3:a:oracle:terracotta_quartz_scheduler_mapviewer:18c:*:*:*:*:*:*:*18cVulnerableOracle
cpe:2.3:a:oracle:terracotta_quartz_scheduler_mapviewer:19c:*:*:*:*:*:*:*19cVulnerableOracle
cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:apache:tomee:7.1.3:*:*:*:*:*:*:*7.1.3VulnerableApache
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:cloud_secure_agent:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:atlassian:jira_service_management:4.20.0:*:*:*:data_center:*:*:*4.20.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.0:*:*:*:server:*:*:*4.20.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.1:*:*:*:data_center:*:*:*4.20.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.1:*:*:*:server:*:*:*4.20.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.2:*:*:*:data_center:*:*:*4.20.2VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.2:*:*:*:server:*:*:*4.20.2VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.3:*:*:*:data_center:*:*:*4.20.3VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.3:*:*:*:server:*:*:*4.20.3VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.4:*:*:*:data_center:*:*:*4.20.4VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.4:*:*:*:server:*:*:*4.20.4VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.5:*:*:*:data_center:*:*:*4.20.5VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.5:*:*:*:server:*:*:*4.20.5VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.6:*:*:*:data_center:*:*:*4.20.6VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.6:*:*:*:server:*:*:*4.20.6VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.7:*:*:*:data_center:*:*:*4.20.7VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.7:*:*:*:server:*:*:*4.20.7VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.8:*:*:*:data_center:*:*:*4.20.8VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.8:*:*:*:server:*:*:*4.20.8VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.9:*:*:*:data_center:*:*:*4.20.9VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.9:*:*:*:server:*:*:*4.20.9VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.10:*:*:*:data_center:*:*:*4.20.10VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.10:*:*:*:server:*:*:*4.20.10VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.11:*:*:*:data_center:*:*:*4.20.11VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.11:*:*:*:server:*:*:*4.20.11VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.12:*:*:*:data_center:*:*:*4.20.12VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.12:*:*:*:server:*:*:*4.20.12VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.13:*:*:*:data_center:*:*:*4.20.13VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.13:*:*:*:server:*:*:*4.20.13VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.14:*:*:*:data_center:*:*:*4.20.14VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.14:*:*:*:server:*:*:*4.20.14VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.15:*:*:*:data_center:*:*:*4.20.15VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.15:*:*:*:server:*:*:*4.20.15VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.16:*:*:*:data_center:*:*:*4.20.16VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.16:*:*:*:server:*:*:*4.20.16VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.17:*:*:*:data_center:*:*:*4.20.17VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.17:*:*:*:server:*:*:*4.20.17VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.18:*:*:*:data_center:*:*:*4.20.18VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.18:*:*:*:server:*:*:*4.20.18VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.19:*:*:*:data_center:*:*:*4.20.19VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.19:*:*:*:server:*:*:*4.20.19VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.20:*:*:*:data_center:*:*:*4.20.20VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.20:*:*:*:server:*:*:*4.20.20VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.21:*:*:*:data_center:*:*:*4.20.21VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.21:*:*:*:server:*:*:*4.20.21VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.22:*:*:*:data_center:*:*:*4.20.22VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.22:*:*:*:server:*:*:*4.20.22VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.23:*:*:*:data_center:*:*:*4.20.23VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.23:*:*:*:server:*:*:*4.20.23VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.24:*:*:*:data_center:*:*:*4.20.24VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.24:*:*:*:server:*:*:*4.20.24VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.25:*:*:*:data_center:*:*:*4.20.25VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.20.25:*:*:*:server:*:*:*4.20.25VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.21.0:*:*:*:data_center:*:*:*4.21.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.21.0:*:*:*:server:*:*:*4.21.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.21.1:*:*:*:data_center:*:*:*4.21.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.21.1:*:*:*:server:*:*:*4.21.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.22.0:*:*:*:data_center:*:*:*4.22.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.22.0:*:*:*:server:*:*:*4.22.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.22.1:*:*:*:data_center:*:*:*4.22.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.22.1:*:*:*:server:*:*:*4.22.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.22.2:*:*:*:data_center:*:*:*4.22.2VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.22.2:*:*:*:server:*:*:*4.22.2VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.22.3:*:*:*:data_center:*:*:*4.22.3VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.22.3:*:*:*:server:*:*:*4.22.3VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.22.4:*:*:*:data_center:*:*:*4.22.4VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.22.4:*:*:*:server:*:*:*4.22.4VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.22.6:*:*:*:data_center:*:*:*4.22.6VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:4.22.6:*:*:*:server:*:*:*4.22.6VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.0.0:*:*:*:data_center:*:*:*5.0.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.0.0:*:*:*:server:*:*:*5.0.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.1.0:*:*:*:data_center:*:*:*5.1.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.1.0:*:*:*:server:*:*:*5.1.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.1.1:*:*:*:data_center:*:*:*5.1.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.1.1:*:*:*:server:*:*:*5.1.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.2.0:*:*:*:data_center:*:*:*5.2.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.2.0:*:*:*:server:*:*:*5.2.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.2.1:*:*:*:data_center:*:*:*5.2.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.2.1:*:*:*:server:*:*:*5.2.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.3.0:*:*:*:data_center:*:*:*5.3.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.3.0:*:*:*:server:*:*:*5.3.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.3.1:*:*:*:data_center:*:*:*5.3.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.3.1:*:*:*:server:*:*:*5.3.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.3.2:*:*:*:data_center:*:*:*5.3.2VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.3.2:*:*:*:server:*:*:*5.3.2VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.3.3:*:*:*:data_center:*:*:*5.3.3VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.3.3:*:*:*:server:*:*:*5.3.3VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.0:*:*:*:data_center:*:*:*5.4.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.0:*:*:*:server:*:*:*5.4.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.1:*:*:*:data_center:*:*:*5.4.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.1:*:*:*:server:*:*:*5.4.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.2:*:*:*:data_center:*:*:*5.4.2VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.2:*:*:*:server:*:*:*5.4.2VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.3:*:*:*:data_center:*:*:*5.4.3VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.3:*:*:*:server:*:*:*5.4.3VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.4:*:*:*:data_center:*:*:*5.4.4VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.4:*:*:*:server:*:*:*5.4.4VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.5:*:*:*:data_center:*:*:*5.4.5VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.5:*:*:*:server:*:*:*5.4.5VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.6:*:*:*:data_center:*:*:*5.4.6VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.6:*:*:*:server:*:*:*5.4.6VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.7:*:*:*:data_center:*:*:*5.4.7VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.7:*:*:*:server:*:*:*5.4.7VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.8:*:*:*:data_center:*:*:*5.4.8VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.8:*:*:*:server:*:*:*5.4.8VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.9:*:*:*:data_center:*:*:*5.4.9VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.4.9:*:*:*:server:*:*:*5.4.9VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.5.1:*:*:*:data_center:*:*:*5.5.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.5.1:*:*:*:server:*:*:*5.5.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.6.0:*:*:*:data_center:*:*:*5.6.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.6.0:*:*:*:server:*:*:*5.6.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.7.0:*:*:*:data_center:*:*:*5.7.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.7.0:*:*:*:server:*:*:*5.7.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.7.1:*:*:*:data_center:*:*:*5.7.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.7.1:*:*:*:server:*:*:*5.7.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.8.0:*:*:*:data_center:*:*:*5.8.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.8.0:*:*:*:server:*:*:*5.8.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.8.1:*:*:*:data_center:*:*:*5.8.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.8.1:*:*:*:server:*:*:*5.8.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.9.0:*:*:*:data_center:*:*:*5.9.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.9.0:*:*:*:server:*:*:*5.9.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.10.0:*:*:*:data_center:*:*:*5.10.0VulnerableAtlassian
cpe:2.3:a:atlassian:jira_service_management:5.10.0:*:*:*:server:*:*:*5.10.0VulnerableAtlassian
  • cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:* Versions 7.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:* Versions 8.2.0 – 8.2.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:* Versions 18.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:documaker:*:*:*:*:*:*:*:* Versions 12.6.0 – 12.6.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.1.0:*:*:*:*:*:*:* Versions 13.2.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* Versions 12.4.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:* Versions 12.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:* Versions 12.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:flexcube_investor_servicing:12.4.0:*:*:*:*:*:*:* Versions 12.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:flexcube_investor_servicing:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:flexcube_investor_servicing:14.4.0:*:*:*:*:*:*:* Versions 14.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:* Versions 12.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:* Versions 12.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:google_guava_mapviewer:12.2.0.1:*:*:*:*:*:*:* Versions 12.2.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:google_guava_mapviewer:18c:*:*:*:*:*:*:* Versions 18c Vulnerable ·Oracle
  • cpe:2.3:a:oracle:google_guava_mapviewer:19c:*:*:*:*:*:*:* Versions 19c Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:* Versions 11.1.2.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:* Versions up to 9.2.5.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* Versions 17.7 – 17.12 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:* Versions 16.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:* Versions 16.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* Versions 18.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_integration_bus:15.0:*:*:*:*:*:*:* Versions 15.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_integration_bus:16.0:*:*:*:*:*:*:* Versions 16.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:* Versions 15.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:* Versions 16.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:* Versions 18.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_order_broker:19.0:*:*:*:*:*:*:* Versions 19.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:* Versions 15.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:* Versions 16.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:* Versions 17.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0:*:*:*:*:*:*:* Versions 18.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0:*:*:*:*:*:*:* Versions 19.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:terracotta_quartz_scheduler_mapviewer:12.2.0.1:*:*:*:*:*:*:* Versions 12.2.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:terracotta_quartz_scheduler_mapviewer:18c:*:*:*:*:*:*:* Versions 18c Vulnerable ·Oracle
  • cpe:2.3:a:oracle:terracotta_quartz_scheduler_mapviewer:19c:*:*:*:*:*:*:* Versions 19c Vulnerable ·Oracle
  • cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:apache:tomee:7.1.3:*:*:*:*:*:*:* Versions 7.1.3 Vulnerable ·Apache
  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:cloud_secure_agent:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:atlassian:jira_service_management:4.20.0:*:*:*:data_center:*:*:* Versions 4.20.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.0:*:*:*:server:*:*:* Versions 4.20.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.1:*:*:*:data_center:*:*:* Versions 4.20.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.1:*:*:*:server:*:*:* Versions 4.20.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.2:*:*:*:data_center:*:*:* Versions 4.20.2 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.2:*:*:*:server:*:*:* Versions 4.20.2 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.3:*:*:*:data_center:*:*:* Versions 4.20.3 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.3:*:*:*:server:*:*:* Versions 4.20.3 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.4:*:*:*:data_center:*:*:* Versions 4.20.4 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.4:*:*:*:server:*:*:* Versions 4.20.4 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.5:*:*:*:data_center:*:*:* Versions 4.20.5 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.5:*:*:*:server:*:*:* Versions 4.20.5 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.6:*:*:*:data_center:*:*:* Versions 4.20.6 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.6:*:*:*:server:*:*:* Versions 4.20.6 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.7:*:*:*:data_center:*:*:* Versions 4.20.7 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.7:*:*:*:server:*:*:* Versions 4.20.7 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.8:*:*:*:data_center:*:*:* Versions 4.20.8 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.8:*:*:*:server:*:*:* Versions 4.20.8 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.9:*:*:*:data_center:*:*:* Versions 4.20.9 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.9:*:*:*:server:*:*:* Versions 4.20.9 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.10:*:*:*:data_center:*:*:* Versions 4.20.10 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.10:*:*:*:server:*:*:* Versions 4.20.10 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.11:*:*:*:data_center:*:*:* Versions 4.20.11 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.11:*:*:*:server:*:*:* Versions 4.20.11 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.12:*:*:*:data_center:*:*:* Versions 4.20.12 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.12:*:*:*:server:*:*:* Versions 4.20.12 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.13:*:*:*:data_center:*:*:* Versions 4.20.13 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.13:*:*:*:server:*:*:* Versions 4.20.13 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.14:*:*:*:data_center:*:*:* Versions 4.20.14 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.14:*:*:*:server:*:*:* Versions 4.20.14 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.15:*:*:*:data_center:*:*:* Versions 4.20.15 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.15:*:*:*:server:*:*:* Versions 4.20.15 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.16:*:*:*:data_center:*:*:* Versions 4.20.16 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.16:*:*:*:server:*:*:* Versions 4.20.16 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.17:*:*:*:data_center:*:*:* Versions 4.20.17 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.17:*:*:*:server:*:*:* Versions 4.20.17 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.18:*:*:*:data_center:*:*:* Versions 4.20.18 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.18:*:*:*:server:*:*:* Versions 4.20.18 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.19:*:*:*:data_center:*:*:* Versions 4.20.19 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.19:*:*:*:server:*:*:* Versions 4.20.19 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.20:*:*:*:data_center:*:*:* Versions 4.20.20 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.20:*:*:*:server:*:*:* Versions 4.20.20 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.21:*:*:*:data_center:*:*:* Versions 4.20.21 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.21:*:*:*:server:*:*:* Versions 4.20.21 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.22:*:*:*:data_center:*:*:* Versions 4.20.22 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.22:*:*:*:server:*:*:* Versions 4.20.22 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.23:*:*:*:data_center:*:*:* Versions 4.20.23 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.23:*:*:*:server:*:*:* Versions 4.20.23 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.24:*:*:*:data_center:*:*:* Versions 4.20.24 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.24:*:*:*:server:*:*:* Versions 4.20.24 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.25:*:*:*:data_center:*:*:* Versions 4.20.25 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.20.25:*:*:*:server:*:*:* Versions 4.20.25 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.21.0:*:*:*:data_center:*:*:* Versions 4.21.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.21.0:*:*:*:server:*:*:* Versions 4.21.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.21.1:*:*:*:data_center:*:*:* Versions 4.21.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.21.1:*:*:*:server:*:*:* Versions 4.21.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.22.0:*:*:*:data_center:*:*:* Versions 4.22.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.22.0:*:*:*:server:*:*:* Versions 4.22.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.22.1:*:*:*:data_center:*:*:* Versions 4.22.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.22.1:*:*:*:server:*:*:* Versions 4.22.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.22.2:*:*:*:data_center:*:*:* Versions 4.22.2 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.22.2:*:*:*:server:*:*:* Versions 4.22.2 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.22.3:*:*:*:data_center:*:*:* Versions 4.22.3 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.22.3:*:*:*:server:*:*:* Versions 4.22.3 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.22.4:*:*:*:data_center:*:*:* Versions 4.22.4 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.22.4:*:*:*:server:*:*:* Versions 4.22.4 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.22.6:*:*:*:data_center:*:*:* Versions 4.22.6 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:4.22.6:*:*:*:server:*:*:* Versions 4.22.6 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.0.0:*:*:*:data_center:*:*:* Versions 5.0.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.0.0:*:*:*:server:*:*:* Versions 5.0.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.1.0:*:*:*:data_center:*:*:* Versions 5.1.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.1.0:*:*:*:server:*:*:* Versions 5.1.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.1.1:*:*:*:data_center:*:*:* Versions 5.1.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.1.1:*:*:*:server:*:*:* Versions 5.1.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.2.0:*:*:*:data_center:*:*:* Versions 5.2.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.2.0:*:*:*:server:*:*:* Versions 5.2.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.2.1:*:*:*:data_center:*:*:* Versions 5.2.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.2.1:*:*:*:server:*:*:* Versions 5.2.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.3.0:*:*:*:data_center:*:*:* Versions 5.3.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.3.0:*:*:*:server:*:*:* Versions 5.3.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.3.1:*:*:*:data_center:*:*:* Versions 5.3.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.3.1:*:*:*:server:*:*:* Versions 5.3.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.3.2:*:*:*:data_center:*:*:* Versions 5.3.2 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.3.2:*:*:*:server:*:*:* Versions 5.3.2 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.3.3:*:*:*:data_center:*:*:* Versions 5.3.3 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.3.3:*:*:*:server:*:*:* Versions 5.3.3 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.0:*:*:*:data_center:*:*:* Versions 5.4.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.0:*:*:*:server:*:*:* Versions 5.4.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.1:*:*:*:data_center:*:*:* Versions 5.4.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.1:*:*:*:server:*:*:* Versions 5.4.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.2:*:*:*:data_center:*:*:* Versions 5.4.2 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.2:*:*:*:server:*:*:* Versions 5.4.2 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.3:*:*:*:data_center:*:*:* Versions 5.4.3 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.3:*:*:*:server:*:*:* Versions 5.4.3 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.4:*:*:*:data_center:*:*:* Versions 5.4.4 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.4:*:*:*:server:*:*:* Versions 5.4.4 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.5:*:*:*:data_center:*:*:* Versions 5.4.5 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.5:*:*:*:server:*:*:* Versions 5.4.5 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.6:*:*:*:data_center:*:*:* Versions 5.4.6 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.6:*:*:*:server:*:*:* Versions 5.4.6 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.7:*:*:*:data_center:*:*:* Versions 5.4.7 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.7:*:*:*:server:*:*:* Versions 5.4.7 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.8:*:*:*:data_center:*:*:* Versions 5.4.8 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.8:*:*:*:server:*:*:* Versions 5.4.8 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.9:*:*:*:data_center:*:*:* Versions 5.4.9 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.4.9:*:*:*:server:*:*:* Versions 5.4.9 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.5.1:*:*:*:data_center:*:*:* Versions 5.5.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.5.1:*:*:*:server:*:*:* Versions 5.5.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.6.0:*:*:*:data_center:*:*:* Versions 5.6.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.6.0:*:*:*:server:*:*:* Versions 5.6.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.7.0:*:*:*:data_center:*:*:* Versions 5.7.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.7.0:*:*:*:server:*:*:* Versions 5.7.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.7.1:*:*:*:data_center:*:*:* Versions 5.7.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.7.1:*:*:*:server:*:*:* Versions 5.7.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.8.0:*:*:*:data_center:*:*:* Versions 5.8.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.8.0:*:*:*:server:*:*:* Versions 5.8.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.8.1:*:*:*:data_center:*:*:* Versions 5.8.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.8.1:*:*:*:server:*:*:* Versions 5.8.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.9.0:*:*:*:data_center:*:*:* Versions 5.9.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.9.0:*:*:*:server:*:*:* Versions 5.9.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.10.0:*:*:*:data_center:*:*:* Versions 5.10.0 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_service_management:5.10.0:*:*:*:server:*:*:* Versions 5.10.0 Vulnerable ·Atlassian

Remediation

  • Fix · GHSA-9qcf-c26r-x5rf org.quartz-scheduler:quartz (Maven) Fixed in 2.3.2 Advisory →

Red Hat 4 advisories

  • RHSA-2020:5568 Released 2020-12-16 · Red Hat rating Important
    Red Hat Fuse 7.8.0 release and security update
    • Red Hat Fuse 7.8.0
  • RHSA-2020:3247 Released 2020-08-04 · Red Hat rating Important
    RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update
    • RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 novnc-1.1.0-1.el8ost, ovirt-engine-4.4.1.8-0.7.el8ev, ovirt-engine-api-explorer-0.0.6-1.el8ev +21
  • RHSA-2020:3197 Released 2020-07-29 · Red Hat rating Important
    Red Hat Process Automation Manager 7.8.0 Security Update
    • Red Hat Process Automation 7
Show 1 more Red Hat advisories
  • RHSA-2020:3196 Released 2020-07-29 · Red Hat rating Important
    Red Hat Decision Manager 7.8.0 Security Update
    • Red Hat Decision Manager 7

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat JBoss Fuse Service Works 6AffectedNo fix planned: Out of support scope
Red Hat Satellite 5AffectedNo fix planned: Out of support scope
Red Hat Satellite 6AffectedNo fix yet: Fix deferred
RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4Fixed RHSA-2020:3247
Red Hat Decision Manager 7Fixed RHSA-2020:3196
Red Hat Fuse 7.8.0Fixed RHSA-2020:5568
Red Hat Process Automation 7Fixed RHSA-2020:3197
Not affected: 1 product
  • RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-13990
  2. 2026-10-03 Alias added: GHSA-9qcf-c26r-x5rf

References

Patch 2

Advisory 11

Other 17

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences