CVE-2019-10219
| Affected software | 11 products, listed below |
|---|---|
| Severity | 6.1 Medium CVSS 3.1 3 scores |
| Fixed in | 6.1.0.Alpha6, 6.0.18.Final |
| Weakness | Cross-site scripting (CWE-79) |
| Published | 8 Nov 2019 |
| Updated | 13 Nov 2026 |
Description
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Exploitation status
No public exploit
No exploit has been reported in the sources we check. Published 7 years ago.
Exploitation status
- CISA KEV not listed
- VulnCheck KEV not listed
- CISA Vulnrichment exploitation: none
- Indexed PoC none indexed
- EPSS 2.2% chance in 30 days
Waratek protection
Waratek has a rule that blocks attacks on this vulnerability.
- Protection full XSS
- Action available security rule
- Review human Researcher
- Record active
| Decided by | A researcher's recorded decision for this specific CVE |
|---|---|
| Finding | A researcher found this CVE protected by the ARMR XSS. |
Waratek research note
written 2026-11-13Written by a Waratek engineer who reviewed this CVE. Their decision sets the status above, ahead of every automated rule except a withdrawal.
Comments
Rule Name: XSS
How to mitigate CVE-2019-10219
Upgrade the affected software to a release that fixes it: 6.1.0.Alpha6 or 6.0.18.Final. Until you can, Waratek RASP blocks exploitation with its XSS rule. It runs inside the Java application, with no code changes.
Waratek RASP Runtime protection for Java applications
CVSS
6.1 MEDIUM
v3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
3 metrics
CVSS
6.1 MEDIUM v3.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
3 metrics
We show the highest score from the newest CVSS version. Scores from different versions can't be compared, and the first score listed is sometimes a 0.0 placeholder.
| Version | Score | Band | Vector | Assigner | Type | |
|---|---|---|---|---|---|---|
| CVSS 3.1 | 6.1 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
NVD | Primary | published |
| CVSS 3.0 | 6.5 | MEDIUM | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
secalert@redhat.com | Secondary | |
| CVSS 2.0 | 4.3 | none | AV:N/AC:M/Au:N/C:N/I:P/A:N |
NVD | Primary |
Affected software and releases
Oracle advisories
| Advisory | Type | Quarter | Products Oracle names in its risk matrix |
|---|---|---|---|
| Oracle Critical Patch Update January 2022 ↗ | CPU | 2022-Q1 | Oracle Fusion Middleware / Web Services (JBoss Enterprise Application Platform) (12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0) |
Oracle components and versions
| Family | Component | Versions, as Oracle lists them | Read as |
|---|---|---|---|
| Oracle Fusion Middleware | Web Services (JBoss Enterprise Application Platform) | 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 | 12.2.1.3.0 · 12.2.1.4.0 · 14.1.1.0.0 |
Maven packages
Affected and fixed versions, from OSV.dev| Package | Introduced | Fixed | Last affected |
|---|---|---|---|
org.hibernate.validator:hibernate-validator |
6.1.0.Alpha1 | 6.1.0.Alpha6 |
unbounded |
org.hibernate.validator:hibernate-validator |
6.0.0.Alpha1 | 6.0.18.Final |
unbounded |
org.hibernate:hibernate-validator |
6.1.0.Alpha1 | 6.1.0.Alpha6 |
unbounded |
org.hibernate:hibernate-validator |
6.0.0.Alpha1 | 6.0.18.Final |
unbounded |
Products and versions
189 products, 421 version entries| Source | Vendor | Product | Scheme | Affected versions |
|---|---|---|---|---|
| nvd | netapp | active iq unified manager | generic | any version |
| nvd | netapp | element | generic | any version |
| nvd | netapp | management services for element software and netapp hci | generic | any version |
| nvd | netapp | snapcenter plug-in | generic | any version |
| nvd | oracle | access manager | generic | 11.1.2.3.0 · 12.2.1.3.0 · 12.2.1.4.0 |
| nvd | oracle | agile engineering data management | generic | 6.2.1.0 |
| nvd | oracle | agile product lifecycle analytics | generic | 3.6.1 |
| nvd | oracle | agile product lifecycle management | generic | 9.3.3 · 9.3.6 |
| nvd | oracle | agile product lifecycle management integration pack | generic | 3.6 |
| nvd | oracle | airlines data model | generic | 12.1.1.0.0 · 12.2.0.1.0 |
| nvd | oracle | application express | generic | 21.1.4 |
| nvd | oracle | application performance management | generic | 13.4.1.0 · 13.5.1.0 |
| nvd | oracle | application testing suite | generic | 13.3.0.1 |
| nvd | oracle | argus analytics | generic | 8.2.1 · 8.2.2 · 8.2.3 · 8.21 |
| nvd | oracle | argus insight | generic | 8.2.1 · 8.2.2 · 8.2.3 |
| nvd | oracle | argus safety | generic | 8.2.1 · 8.2.2 · 8.2.3 |
| nvd | oracle | banking apis | generic | 18.1 · 18.2 · 18.3 · 19.1 · 19.2 · 20.1 · 21.1 |
| nvd | oracle | banking deposits and lines of credit servicing | generic | 2.12.0 |
| nvd | oracle | banking digital experience | generic | 17.2 · 18.1 · 18.3 · 19.1 · 19.2 · 20.1 · 21.1 |
| nvd | oracle | banking enterprise default management | generic | 2.6.2 · 2.7.0 · 2.7.1 · 2.10.0 · 2.12.0 |
| nvd | oracle | banking enterprise default managment | generic | ≥ 2.3.0 and ≤ 2.4.0 |
| nvd | oracle | banking loans servicing | generic | 2.12.0 |
| nvd | oracle | banking party management | generic | 2.7.0 |
| nvd | oracle | banking platform | generic | ≥ 2.3.0 and ≤ 2.4.1 · 2.6.2 · 2.7.0 · 2.7.1 |
| nvd | oracle | bi publisher | generic | 5.5.0.0.0 · 11.1.1.9.0 · 12.2.1.3.0 · 12.2.1.4.0 |
| nvd | oracle | big data spatial and graph | generic | 23.1 |
| nvd | oracle | business activity monitoring | generic | 12.2.1.4.0 |
| nvd | oracle | business intelligence | generic | 5.5.0.0.0 · 5.9.0.0.0 · 12.2.1.3.0 · 12.2.1.4.0 |
| nvd | oracle | business process management suite | generic | 12.2.1.3.0 · 12.2.1.4.0 |
| nvd | oracle | clinical | generic | 5.2.1 · 5.2.2 |
| nvd | oracle | commerce guided search | generic | 11.3.2 |
| nvd | oracle | commerce platform | generic | ≥ 11.3.0 and ≤ 11.3.2 |
| nvd | oracle | communications application session controller | generic | 3.9.0 |
| nvd | oracle | communications billing and revenue management | generic | 12.0.0.3 · 12.0.0.4 |
| nvd | oracle | communications billing and revenue management elastic charging engine | generic | 11.3 · 12.0 |
| nvd | oracle | communications calendar server | generic | 8.0.0.5.0 · 8.0.0.6.0 |
| nvd | oracle | communications cloud native core automated test suite | generic | 1.8.0 |
| nvd | oracle | communications cloud native core binding support function | generic | 1.9.0 · 1.10.0 |
| nvd | oracle | communications cloud native core console | generic | 1.7.0 |
| nvd | oracle | communications cloud native core network function cloud native environment | generic | 1.9.0 |
| nvd | oracle | communications cloud native core network repository function | generic | 1.14.0 |
| nvd | oracle | communications cloud native core policy | generic | 1.14.0 |
| nvd | oracle | communications cloud native core security edge protection proxy | generic | 1.5.0 · 1.6.0 · 1.15.0 |
| nvd | oracle | communications cloud native core service communication proxy | generic | 1.14.0 |
| nvd | oracle | communications cloud native core unified data repository | generic | 1.14.0 |
| nvd | oracle | communications contacts server | generic | 8.0.0.3.0 |
| nvd | oracle | communications converged application server - service controller | generic | 6.2 |
| nvd | oracle | communications convergence | generic | 3.0.2.2.0 |
| nvd | oracle | communications convergent charging controller | generic | 6.0.1.0.0 · ≥ 12.0.1.0.0 and ≤ 12.0.4.0.0 |
| nvd | oracle | communications data model | generic | 11.3.2.1.0 · 11.3.2.2.0 · 11.3.2.3.0 · 12.1.0.1.0 · 12.1.2.0.0 |
| nvd | oracle | communications design studio | generic | 7.3.4 · 7.3.5 · 7.4.0 · 7.4.1 · 7.4.2 |
| nvd | oracle | communications diameter signaling route | generic | ≥ 8.0.0.0 and ≤ 8.5.1.0 |
| nvd | oracle | communications eagle application processor | generic | ≥ 16.1 and ≤ 16.4 |
| nvd | oracle | communications instant messaging server | generic | 10.0.1.5.0 |
| nvd | oracle | communications interactive session recorder | generic | 6.3 · 6.4 |
| nvd | oracle | communications messaging server | generic | 8.1 |
| nvd | oracle | communications metasolv solution | generic | 6.3.1 |
| nvd | oracle | communications network charging and control | generic | 6.0.1.0.0 · ≥ 12.0.1.0.0 and ≤ 12.0.4.0.0 |
| nvd | oracle | communications network integrity | generic | 7.3.5 · 7.3.6 |
| nvd | oracle | communications offline mediation controller | generic | 12.0.0.3 |
| nvd | oracle | communications operations monitor | generic | 3.4 · 4.2 · 4.3 · 4.4 · 5.0 |
| nvd | oracle | communications pricing design center | generic | 12.0.0.3.0 · 12.0.0.4.0 |
| nvd | oracle | communications service broker | generic | 6.2 |
| nvd | oracle | communications services gatekeeper | generic | 7.0 |
| nvd | oracle | communications session border controller | generic | 8.2 · 8.3 · 8.4 · 9.0 |
| nvd | oracle | communications unified inventory management | generic | 7.3.0 · 7.3.4 · 7.3.5 · 7.4.0 · 7.4.1 · 7.4.2 · 7.5.0 |
| nvd | oracle | communications webrtc session controller | generic | 7.2.0 · 7.2.1 |
| nvd | oracle | data integrator | generic | 12.2.1.3.0 · 12.2.1.4.0 |
| nvd | oracle | database server | generic | 12.1.0.1 · 12.1.0.2 · 19c · 21c |
| nvd | oracle | demantra demand management | generic | ≥ 12.2.6 and ≤ 12.2.11 |
| nvd | oracle | documaker | generic | ≥ 12.6.0 and ≤ 12.6.4 |
| nvd | oracle | e-business suite | generic | ≥ 12.2.3 and ≤ 12.2.11 |
| nvd | oracle | enterprise communications broker | generic | 3.3 |
| nvd | oracle | enterprise data quality | generic | 12.2.1.3.0 · 12.2.1.4.0 |
| nvd | oracle | enterprise manager base platform | generic | 13.4.0.0 · 13.5.0.0 |
| nvd | oracle | enterprise manager ops center | generic | 12.4.0.0 |
| nvd | oracle | enterprise session border controller | generic | 8.4 · 9.0 |
| nvd | oracle | essbase | generic | 11.1.2.4.47 · ＜ 11.1.2.4.47 · ≥ 21.0 and ＜ 21.3 |
| nvd | oracle | essbase administration services | generic | 11.1.2.4.47 · ＜ 11.1.2.4.47 |
| nvd | oracle | financial services analytical applications infrastructure | generic | 7.3.3 · ≥ 8.0.7 and ≤ 8.1.1 |
| nvd | oracle | financial services behavior detection platform | generic | 8.0.7 · 8.0.8 · 8.0.11 |
| nvd | oracle | financial services enterprise case management | generic | 8.0.7 · 8.0.8 · 8.0.11 |
| nvd | oracle | financial services foreign account tax compliance act management | generic | 8.0.7 · 8.0.8 · 8.0.11 |
| nvd | oracle | financial services model management and governance | generic | ≥ 8.0.8 and ≤ 8.1.1 |
| nvd | oracle | financial services trade-based anti money laundering | generic | 8.0.7 · 8.0.8 |
| nvd | oracle | flexcube investor servicing | generic | 12.0.4 · 12.1.0 · 12.3.0 · 12.4.0 · 14.4.0 · 14.5.0 |
| nvd | oracle | flexcube private banking | generic | 12.0.0 · 12.1.0 |
| nvd | oracle | fujitsu m10-1 firmware | generic | any version |
| nvd | oracle | fujitsu m10-4 firmware | generic | any version |
| nvd | oracle | fujitsu m10-4s firmware | generic | any version |
| nvd | oracle | fujitsu m12-1 firmware | generic | any version |
| nvd | oracle | fujitsu m12-2 firmware | generic | any version |
| nvd | oracle | fujitsu m12-2s firmware | generic | any version |
| nvd | oracle | fusion middleware | generic | 12.2.1.3.0 · 12.2.1.4.0 |
| nvd | oracle | fusion middleware mapviewer | generic | 12.2.1.4.0 |
| nvd | oracle | goldengate | generic | ＜ 12.3.0.1 · ≥ 19.0.0 and ＜ 19.1.0.0.99999 · ≥ 21.0.0 and ＜ 21.5.0.0.99999 |
| nvd | oracle | goldengate application adapters | generic | 19.1.0.0.0 |
| nvd | oracle | graalvm | javase | 20.3.4 · 21.3.0 |
| nvd | oracle | graph server and client | generic | ＜ 21.4 |
| nvd | oracle | health sciences clinical development analytics | generic | 4.0.1 |
| nvd | oracle | health sciences inform crf submit | generic | 6.2.1 |
| nvd | oracle | health sciences information manager | generic | 3.0.2 · 3.0.3 |
| nvd | oracle | healthcare data repository | generic | 7.0.2 · 8.1.0 · 8.1.1 |
| nvd | oracle | healthcare foundation | generic | ≥ 7.3.0.0 and ≤ 7.3.0.2 · ≥ 8.0.0 and ≤ 8.0.2 · 8.1.0 · 8.1.1 |
| nvd | oracle | healthcare translational research | generic | 4.1.0 |
| nvd | oracle | hospitality cruise shipboard property management system | generic | 20.1.0 |
| nvd | oracle | hospitality opera 5 property services | generic | 5.6 |
| nvd | oracle | hospitality reporting and analytics | generic | 9.1.0 |
| nvd | oracle | hospitality suite8 | generic | 8.10.2 · 8.11.0 · 8.12.0 · 8.13.0 · 8.14.0 |
| nvd | oracle | http server | generic | 12.2.1.3.0 · 12.2.1.4.0 |
| nvd | oracle | hyperion financial management | generic | 11.1.2.4 · 11.2.6.0 |
| nvd | oracle | hyperion ilearning | generic | 6.2 · 6.3 |
| nvd | oracle | hyperion infrastructure technology | generic | 11.2.7.0 |
| nvd | oracle | instantis enterprisetrack | generic | 17.1 · 17.2 · 17.3 |
| nvd | oracle | insurance data gateway | generic | 11.0.2 · 11.1.0 · 11.2.7 · 11.3.0 · 11.3.1 |
| nvd | oracle | insurance insbridge rating and underwriting | generic | 5.2.0 · ≥ 5.4.0 and ≤ 5.6.0 |
| nvd | oracle | insurance policy administration | generic | 11.0.2 · 11.1.0 · 11.2.7 · 11.3.0 · 11.3.1 |
| nvd | oracle | insurance policy administration j2ee | generic | 10.2.0 · 10.2.4 · 11.0.2 · ≥ 11.1.0 and ≤ 11.3.0 |
| nvd | oracle | insurance rules palette | generic | 10.2.0 · 10.2.4 · 11.0.2 · ≥ 11.1.0 and ≤ 11.3.0 · 11.3.1 |
| nvd | oracle | java se | javase | 7u321 · 8u311 · 17.1 |
| nvd | oracle | jd edwards enterpriseone orchestrator | generic | ＜ 9.2.6.1 |
| nvd | oracle | jdk | javase | 11.0.13 |
| nvd | oracle | managed file transfer | generic | 12.2.1.3.0 · 12.2.1.4.0 |
| nvd | oracle | mysql cluster | generic | ＜ 7.4.34 · ≥ 7.5.0 and ＜ 7.5.24 · ≥ 7.6.0 and ＜ 7.6.20 · ≥ 8.0.0 and ＜ 8.0.27 |
| nvd | oracle | mysql connectors | generic | 8.0.27 · ＜ 8.0.27 |
| nvd | oracle | mysql server | generic | 5.7.36 · ＜ 5.7.36 · ≥ 8.0.0 and ＜ 8.0.27 |
| nvd | oracle | mysql workbench | generic | ＜ 8.0.27 |
| nvd | oracle | nosql database | generic | ＜ 21.1.12 |
| nvd | oracle | oss support tools | generic | ＜ 2.12.42 |
| nvd | oracle | peoplesoft enterprise cs sa integration pack | generic | 9.0 · 9.2 |
| nvd | oracle | peoplesoft enterprise peopletools | generic | 8.57 · 8.58 · 8.59 |
| nvd | oracle | policy automation | generic | 10.4.7 · ≥ 12.2.0 and ≤ 12.2.24 |
| nvd | oracle | primavera analytics | generic | 18.8.3.3 · 19.12.11.1 · 20.12.12.0 |
| nvd | oracle | primavera data warehouse | generic | 18.8.3.3 · 19.12.11.1 · 20.12.12.0 |
| nvd | oracle | primavera gateway | generic | ≥ 17.12.0 and ≤ 17.12.11 · ≥ 18.8.0 and ≤ 18.8.13 · ≥ 19.12.0 and ≤ 19.12.12 · ≥ 20.12.0 and ≤ 20.12.7 · 21.12.0 |
| nvd | oracle | primavera p6 enterprise project portfolio management | generic | ≥ 17.12.0.0 and ≤ 17.12.0.0.17.12 · ≥ 18.8.0.0 and ≤ 18.8.24.0 · ≥ 19.12.0.0 and ≤ 19.12.18.0 · ≥ 20.12.0.0 and ≤ 20.12.12.0 · 21.12.0.0 |
| nvd | oracle | primavera p6 professional project management | generic | ≥ 17.12.0.0 and ≤ 17.12.20.0 · ≥ 18.8.0.0 and ≤ 18.8.24.0 · ≥ 19.12.0.0 and ≤ 19.12.17.0 · ≥ 20.12.0.0 and ≤ 20.12.9.0 |
| nvd | oracle | primavera portfolio management | generic | ≥ 18.0.0.0 and ≤ 18.0.3.0 · ≥ 19.0.0.0 and ≤ 19.0.1.2 · 20.0.0.0 · 20.0.0.1 |
| nvd | oracle | primavera unifier | generic | ≥ 17.7 and ≤ 17.12 · 18.8 · 19.12 · 20.12 · 21.12 |
| nvd | oracle | rapid planning | generic | ≥ 12.2.6 and ≤ 12.2.11 |
| nvd | oracle | real user experience insight | generic | 13.4.1.0 · 13.5.1.0 |
| nvd | oracle | real-time decision server | generic | 3.2.0.0 |
| nvd | oracle | rest data services | generic | 21.2.4 |
| nvd | oracle | retail allocation | generic | 14.1.3.2 · 15.0.3.1 · 16.0.3 · 19.0.1 |
| nvd | oracle | retail analytics | generic | ≥ 16.0.0 and ≤ 16.0.2 |
| nvd | oracle | retail assortment planning | generic | 16.0.3 |
| nvd | oracle | retail back office | generic | 14.1 |
| nvd | oracle | retail central office | generic | 14.1 |
| nvd | oracle | retail customer insights | generic | ≥ 16.0.0 and ≤ 16.0.2 |
| nvd | oracle | retail customer management and segmentation foundation | generic | ≥ 16.0 and ≤ 19.0 |
| nvd | oracle | retail eftlink | generic | 16.0.3 · 17.0.2 · 18.0.1 · 19.0.1 · 20.0.1 |
| nvd | oracle | retail extract transform and load | generic | 13.2.8 |
| nvd | oracle | retail financial integration | generic | 14.1.3.2 · 15.0.3.1 · 16.0.3 · 19.0.1 |
| nvd | oracle | retail fiscal management | generic | 14.2 |
| nvd | oracle | retail integration bus | generic | 13.0 · 14.1.3.0 · 14.1.3.2 · 15.0.3.1 · ≥ 16.0.1 and ≤ 16.0.3 · 19.0.0 · 19.0.1 |
| nvd | oracle | retail invoice matching | generic | 15.0.3 · 16.0.3 |
| nvd | oracle | retail merchandising system | generic | 19.0.1 |
| nvd | oracle | retail order broker | generic | 16.0 · 18.0 · 19.1 |
| nvd | oracle | retail order management system | generic | 19.5 |
| nvd | oracle | retail point-of-sale | generic | 14.1 |
| nvd | oracle | retail predictive application server | generic | 14.1.3 · 14.1.3.46 · 15.0.3 · 15.0.3.115 · 16.0.3 · 16.0.3.240 |
| nvd | oracle | retail price management | generic | 13.2 · 14.0.4 · 14.1 · 14.1.3 · 15.0 · 15.0.3 · 16.0 · 16.0.3 |
| nvd | oracle | retail returns management | generic | 14.1 |
| nvd | oracle | retail service backbone | generic | 14.1.3.0 · 14.1.3.2 · 15.0.3.1 · ≥ 16.0.1 and ≤ 16.0.3 · 19.0.0 · 19.0.1 |
| nvd | oracle | retail size profile optimization | generic | 16.0.3 |
| nvd | oracle | retail xstore point of service | generic | 17.0.4 · 18.0.3 · 19.0.2 · 20.0.1 |
| nvd | oracle | sd-wan aware | generic | 8.2 |
| nvd | oracle | sd-wan edge | generic | 9.0 · 9.1 |
| nvd | oracle | secure backup | generic | 18.1.0.1.0 |
| nvd | oracle | siebel applications | generic | ＜ 21.12 |
| nvd | oracle | solaris | generic | 10 · 11 |
| nvd | oracle | spatial studio | generic | 21.2.1 |
| nvd | oracle | thesaurus management system | generic | 5.2.3 · 5.3.0 · 5.3.1 |
| nvd | oracle | timesten in-memory database | generic | ＜ 11.2.2.8.27 · ≥ 21.0.0 and ＜ 21.1.1.1.0 |
| nvd | oracle | utilities framework | generic | 4.2.0.2.0 · 4.2.0.3.0 · ≥ 4.3.0.1.0 and ≤ 4.3.0.6.0 · 4.4.0.0.0 · 4.4.0.2.0 · 4.4.0.3.0 |
| nvd | oracle | utilities testing accelerator | generic | 6.0.0.1.1 · 6.0.0.2.2 · 6.0.0.3.1 |
| nvd | oracle | vm virtualbox | generic | ＜ 6.1.32 |
| nvd | oracle | webcenter portal | generic | 12.2.1.3.0 · 12.2.1.4.0 |
| nvd | oracle | weblogic server | generic | 12.1.3.0.0 · 12.2.1.3.0 · 12.2.1.4.0 · 14.1.1.0.0 |
| nvd | oracle | zfs storage appliance kit | generic | 8.8 |
| nvd | oracle | zfs storage application integration engineering software | generic | 1.3.3 |
| osv | org.hibernate | hibernate-validator | generic | ≥ 6.0.0 and ＜ 6.0.18 · ≥ 6.1.0 and ＜ 6.1.0 |
| osv | org.hibernate.validator | hibernate-validator | generic | ≥ 6.0.0 and ＜ 6.0.18 · ≥ 6.1.0 and ＜ 6.1.0 |
| nvd | redhat | fuse | generic | 1.0 |
| nvd | redhat | hibernate validator | generic | ＜ 6.0.18 · 6.1.0:alpha1 · 6.1.0:alpha2 · 6.1.0:alpha3 · 6.1.0:alpha4 · 6.1.0:alpha5 · 6.1.0:alpha6 |
| nvd | redhat | jboss data grid | generic | any version |
| nvd | redhat | jboss enterprise application platform | generic | any version · 7.2 · 7.3 |
| nvd | redhat | openshift application runtimes | generic | any version |
| nvd | redhat | single sign-on | generic | any version |
Earlier manual review
A reviewer classified this CVE in an older dataset. We kept the labels and products below, but not the reviewer's reasoning.
## Manual Classification Context **Labels:** HTTP, NO AUTH REMOTE EXPLOIT, WEB SERVICES (JBOSS ENTERPRISE APPLICATION PLATFORM) **Products:** ORACLE WEBLOGIC SERVER, ORACLE FUSION MIDDLEWARE
References
Timeline
Timeline
| Published | 2019-11-08 | By the CVE Program. |
|---|---|---|
| NVD record modified | 2026-10-08 | NVD's own last-modified date for this record. |
| Classification created | 2026-11-13 | First commit adding this CVE's research note. |
| Last VRT activity | 2026-11-13 | Most recent commit touching this CVE's classification, patch or rule file. |