WaratekVRT Sign in

CVE-2019-11358

Affected software8 products, listed below
Severity6.1 Medium CVSS 3.1 2 scores
WeaknessCWE-1321
Published20 Apr 2019
Updated17 Jun 2026

Description

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Exploitation status

Exploited

Real-world exploitation reported by VulnCheck KEV. CISA has not confirmed it.
  • CISA KEV not listed
  • VulnCheck KEV listed Exploitation reported in the wild. 2 citations · 2 exploits · earliest 2021-01-21.
  • CISA Vulnrichment exploitation: none
  • Indexed PoC 7 indexed Published artifacts you can open, in Exploit-DB, GitHub PoC; first seen 2019-03-30.
  • EPSS 87% chance in 30 days A model's forecast, not a report of exploitation. Higher than 99.7% of all scored CVEs.

VulnCheck KEV

Exploitation evidence from VulnCheck Known Exploited Vulnerabilities (VulnCheck KEV), used under VulnCheck's community terms. View CVE-2019-11358 in VulnCheck (free account).

EvidenceSourceDetailDate
Reported exploitation tenable.com /blog/daisy-chaining-how-vulnerabilities-can-be-greater-than-the-sum-of-their-parts 2021-01-21
Reported exploitation securin.io /wp-content/uploads/2023/08/2023-State-of-Cybersecurity-for-Medical-Devices-and-Healthcare-Systems.pdf 2023-08-08
Exploit reference VulnCheck XDB 713af8fa1647 Exploit type: client-side 2023-08-05
Exploit reference VulnCheck XDB 1bbe24b84a91 Exploit type: client-side 2024-10-22

2 of these are GitHub repositories with fewer than 5 stars. They are listed for reference and don't count toward the exploitation status above.

IndexArtifactStarsFirst seen
GitHub PoC NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot. To use this SDK, download/clone the entire project to your local computer. Getting Started If you are new to robotics or new to the FIRST Tech Challenge, then you should consider reviewing the FTC Blocks Tutorial to get familiar with how to use the control system: FTC Blocks Online Tutorial Even if you are an advanced Java programmer, it is helpful to start with the FTC Blocks tutorial, and then migrate to the OnBot Java Tool or to Android Studio afterwards. Downloading the Project If you are an Android Studio programmer, there are several ways to download this repo. Note that if you use the Blocks or OnBot Java Tool to program your robot, then you do not need to download this repository. If you are a git user, you can clone the most current version of the repository: git clone https://github.com/FIRST-Tech-Challenge/SKYSTONE.git Or, if you prefer, you can use the "Download Zip" button available through the main repository page. Downloading the project as a .ZIP file will keep the size of the download manageable. You can also download the project folder (as a .zip or .tar.gz archive file) from the Downloads subsection of the Releases page for this repository. Once you have downloaded and uncompressed (if needed) your folder, you can use Android Studio to import the folder ("Import project (Eclipse ADT, Gradle, etc.)"). Getting Help User Documentation and Tutorials FIRST maintains online documentation with information and tutorials on how to use the FIRST Tech Challenge software and robot control system. You can access this documentation using the following link: SKYSTONE Online Documentation Note that the online documentation is an "evergreen" document that is constantly being updated and edited. It contains the most current information about the FIRST Tech Challenge software and control system. Javadoc Reference Material The Javadoc reference documentation for the FTC SDK is now available online. Click on the following link to view the FTC SDK Javadoc documentation as a live website: FTC Javadoc Documentation Documentation for the FTC SDK is also included with this repository. There is a subfolder called "doc" which contains several subfolders: The folder "apk" contains the .apk files for the FTC Driver Station and FTC Robot Controller apps. The folder "javadoc" contains the JavaDoc user documentation for the FTC SDK. Online User Forum For technical questions regarding the Control System or the FTC SDK, please visit the FTC Technology forum: FTC Technology Forum Release Information Version 5.5 (20200824-090813) Version 5.5 requires Android Studio 4.0 or later. New features Adds support for calling custom Java classes from Blocks OpModes (fixes SkyStone issue #161). Classes must be in the org.firstinspires.ftc.teamcode package. Methods must be public static and have no more than 21 parameters. Parameters declared as OpMode, LinearOpMode, Telemetry, and HardwareMap are supported and the argument is provided automatically, regardless of the order of the parameters. On the block, the sockets for those parameters are automatically filled in. Parameters declared as char or java.lang.Character will accept any block that returns text and will only use the first character in the text. Parameters declared as boolean or java.lang.Boolean will accept any block that returns boolean. Parameters declared as byte, java.lang.Byte, short, java.lang.Short, int, java.lang.Integer, long, or java.lang.Long, will accept any block that returns a number and will round that value to the nearest whole number. Parameters declared as float, java.lang.Float, double, java.lang.Double will accept any block that returns a number. Adds telemetry API method for setting display format Classic Monospace HTML (certain tags only) Adds blocks support for switching cameras. Adds Blocks support for TensorFlow Object Detection with a custom model. Adds support for uploading a custom TensorFlow Object Detection model in the Manage page, which is especially useful for Blocks and OnBotJava users. Shows new Control Hub blink codes when the WiFi band is switched using the Control Hub's button (only possible on Control Hub OS 1.1.2) Adds new warnings which can be disabled in the Advanced RC Settings Mismatched app versions warning Unnecessary 2.4 GHz WiFi usage warning REV Hub is running outdated firmware (older than version 1.8.2) Adds support for Sony PS4 gamepad, and reworks how gamepads work on the Driver Station Removes preference which sets gamepad type based on driver position. Replaced with menu which allows specifying type for gamepads with unknown VID and PID Attempts to auto-detect gamepad type based on USB VID and PID If gamepad VID and PID is not known, use type specified by user for that VID and PID If gamepad VID and PID is not known AND the user has not specified a type for that VID and PID, an educated guess is made about how to map the gamepad Driver Station will now attempt to automatically recover from a gamepad disconnecting, and re-assign it to the position it was assigned to when it dropped If only one gamepad is assigned and it drops: it can be recovered If two gamepads are assigned, and have different VID/PID signatures, and only one drops: it will be recovered If two gamepads are assigned, and have different VID/PID signatures, and BOTH drop: both will be recovered If two gamepads are assigned, and have the same VID/PID signatures, and only one drops: it will be recovered If two gamepads are assigned, and have the same VID/PID signatures, and BOTH drop: neither will be recovered, because of the ambiguity of the gamepads when they re-appear on the USB bus. There is currently one known edge case: if there are two gamepads with the same VID/PID signature plugged in, but only one is assigned, and they BOTH drop, it's a 50-50 chance of which one will be chosen for automatic recovery to the assigned position: it is determined by whichever one is re-enumerated first by the USB bus controller. Adds landscape user interface to Driver Station New feature: practice timer with audio cues New feature (Control Hub only): wireless network connection strength indicator (0-5 bars) New feature (Control Hub only): tapping on the ping/channel display will switch to an alternate display showing radio RX dBm and link speed (tap again to switch back) The layout will NOT autorotate. You can switch the layout from the Driver Station's settings menu. Breaking changes Removes support for Android versions 4.4 through 5.1 (KitKat and Lollipop). The minSdkVersion is now 23. Removes the deprecated LinearOpMode methods waitOneFullHardwareCycle() and waitForNextHardwareCycle() Enhancements Handles RS485 address of Control Hub automatically The Control Hub is automatically given a reserved address Existing configuration files will continue to work All addresses in the range of 1-10 are still available for Expansion Hubs The Control Hub light will now normally be solid green, without blinking to indicate the address The Control Hub will not be shown on the Expansion Hub Address Change settings page Improves REV Hub firmware updater The user can now choose between all available firmware update files Version 1.8.2 of the REV Hub firmware is bundled into the Robot Controller app. Text was added to clarify that Expansion Hubs can only be updated via USB. Firmware update speed was reduced to improve reliability Allows REV Hub firmware to be updated directly from the Manage webpage Improves log viewer on Robot Controller Horizontal scrolling support (no longer word wrapped) Supports pinch-to-zoom Uses a monospaced font Error messages are highlighted New color scheme Attempts to force-stop a runaway/stuck OpMode without restarting the entire app Not all types of runaway conditions are stoppable, but if the user code attempts to talk to hardware during the runaway, the system should be able to capture it. Makes various tweaks to the Self Inspect screen Renames "OS version" entry to "Android version" Renames "WiFi Direct Name" to "WiFi Name" Adds Control Hub OS version, when viewing the report of a Control Hub Hides the airplane mode entry, when viewing the report of a Control Hub Removes check for ZTE Speed Channel Changer Shows firmware version for all Expansion and Control Hubs Reworks network settings portion of Manage page All network settings are now applied with a single click The WiFi Direct channel of phone-based Robot Controllers can now be changed from the Manage page WiFi channels are filtered by band (2.4 vs 5 GHz) and whether they overlap with other channels The current WiFi channel is pre-selected on phone-based Robot Controllers, and Control Hubs running OS 1.1.2 or later. On Control Hubs running OS 1.1.2 or later, you can choose to have the system automatically select a channel on the 5 GHz band Improves OnBotJava New light and dark themes replace the old themes (chaos, github, chrome,...) the new default theme is light and will be used when you first update to this version OnBotJava now has a tabbed editor Read-only offline mode Improves function of "exit" menu item on Robot Controller and Driver Station Now guaranteed to be fully stopped and unloaded from memory Shows a warning message if a LinearOpMode exists prematurely due to failure to monitor for the start condition Improves error message shown when the Driver Station and Robot Controller are incompatible with each other Driver Station OpMode Control Panel now disabled while a Restart Robot is in progress Disables advanced settings related to WiFi direct when the Robot Controller is a Control Hub. Tint phone battery icons on Driver Station when low/critical. Uses names "Control Hub Portal" and "Control Hub" (when appropriate) in new configuration files Improve I2C read performance Very large improvement on Control Hub; up to ~2x faster with small (e.g. 6 byte) reads Not as apparent on Expansion Hubs connected to a phone Update/refresh build infrastructure Update to 'androidx' support library from 'com.android.support:appcompat', which is end-of-life Update targetSdkVersion and compileSdkVersion to 28 Update Android Studio's Android plugin to latest Fix reported build timestamp in 'About' screen Add sample illustrating manual webcam use: ConceptWebcam Bug fixes Fixes SkyStone issue #248 Fixes SkyStone issue #232 and modifies bulk caching semantics to allow for cache-preserving MANUAL/AUTO transitions. Improves performance when REV 2M distance sensor is unplugged Improves readability of Toast messages on certain devices Allows a Driver Station to connect to a Robot Controller after another has disconnected Improves generation of fake serial numbers for UVC cameras which do not provide a real serial number Previously some devices would assign such cameras a serial of 0:0 and fail to open and start streaming Fixes ftc_app issue #638. Fixes a slew of bugs with the Vuforia camera monitor including: Fixes bug where preview could be displayed with a wonky aspect ratio Fixes bug where preview could be cut off in landscape Fixes bug where preview got totally messed up when rotating phone Fixes bug where crosshair could drift off target when using webcams Fixes issue in UVC driver on some devices (ftc_app 681) if streaming was started/stopped multiple times in a row Issue manifested as kernel panic on devices which do not have this kernel patch. On affected devices which do have the patch, the issue was manifest as simply a failure to start streaming. The Tech Team believes that the root cause of the issue is a bug in the Linux kernel XHCI driver. A workaround was implemented in the SDK UVC driver. Fixes bug in UVC driver where often half the frames from the camera would be dropped (e.g. only 15FPS delivered during a streaming session configured for 30FPS). Fixes issue where TensorFlow Object Detection would show results whose confidence was lower than the minimum confidence parameter. Fixes a potential exploitation issue of CVE-2019-11358 in OnBotJava Fixes changing the address of an Expansion Hub with additional Expansion Hubs connected to it Preserves the Control Hub's network connection when "Restart Robot" is selected Fixes issue where device scans would fail while the Robot was restarting Fix RenderScript usage Use androidx.renderscript variant: increased compatibility Use RenderScript in Java mode, not native: simplifies build Fixes webcam-frame-to-bitmap conversion problem: alpha channel wasn't being initialized, only R, G, & B Fixes possible arithmetic overflow in Deadline Fixes deadlock in Vuforia webcam support which could cause 5-second delays when stopping OpMode Version 5.4 (20200108-101156) Fixes SkyStone issue #88 Adds an inspection item that notes when a robot controller (Control Hub) is using the factory default password. Fixes SkyStone issue #61 Fixes SkyStone issue #142 Fixes ftc_app issue #417 by adding more current and voltage monitoring capabilities for REV Hubs. Fixes a crash sometimes caused by OnBotJava activity Improves OnBotJava autosave functionality ftc_app #738 Fixes system responsiveness issue when an Expansion Hub is disconnected Fixes issue where IMU initialization could prevent Op Modes from stopping Fixes issue where AndroidTextToSpeech.speak() would fail if it was called too early Adds telemetry.speak() methods and blocks, which cause the Driver Station (if also updated) to speak text Adds and improves Expansion Hub-related warnings Improves Expansion Hub low battery warning Displays the warning immediately after the hub reports it Specifies whether the condition is current or occurred temporarily during an OpMode run Displays which hubs reported low battery Displays warning when hub loses and regains power during an OpMode run Fixes the hub's LED pattern after this condition Displays warning when Expansion Hub is not responding to commands Specifies whether the condition is current or occurred temporarily during an OpMode run Clarifies warning when Expansion Hub is not present at startup Specifies that this condition requires a Robot Restart before the hub can be used. The hub light will now accurately reflect this state Improves logging and reduces log spam during these conditions Syncs the Control Hub time and timezone to a connected web browser programming the robot, if a Driver Station is not available. Adds bulk read functionality for REV Hubs A bulk caching mode must be set at the Hub level with LynxModule#setBulkCachingMode(). This applies to all relevant SDK hardware classes that reference that Hub. The following following Hub bulk caching modes are available: BulkCachingMode.OFF (default): All hardware calls operate as usual. Bulk data can read through LynxModule#getBulkData() and processed manually. BulkCachingMode.AUTO: Applicable hardware calls are served from a bulk read cache that is cleared/refreshed automatically to ensure identical commands don't hit the same cache. The cache can also be cleared manually with LynxModule#clearBulkCache(), although this is not recommended. (advanced users) BulkCachingMode.MANUAL: Same as BulkCachingMode.AUTO except the cache is never cleared automatically. To avoid getting stale data, the cache must be manually cleared at the beginning of each loop body or as the user deems appropriate. Removes PIDF Annotation values added in Rev 5.3 (to AndyMark, goBILDA and TETRIX motor configurations). The new motor types will still be available but their Default control behavior will revert back to Rev 5.2 Adds new ConceptMotorBulkRead sample Opmode to demonstrate and compare Motor Bulk-Read modes for reducing I/O latencies. Version 5.3 (20191004-112306) Fixes external USB/UVC webcam support Makes various bugfixes and improvements to Blocks page, including but not limited to: Many visual tweaks Browser zoom and window resize behave better Resizing the Java preview pane works better and more consistently across browsers The Java preview pane consistently gets scrollbars when needed The Java preview pane is hidden by default on phones Internet Explorer 11 should work Large dropdown lists display properly on lower res screens Disabled buttons are now visually identifiable as disabled A warning is shown if a user selects a TFOD sample, but their device is not compatible Warning messages in a Blocks op mode are now visible by default. Adds goBILDA 5201 and 5202 motors to Robot Configurator Adds PIDF Annotation values to AndyMark, goBILDA and TETRIX motor configurations. This has the effect of causing the RUN_USING_ENCODERS and RUN_TO_POSITION modes to use PIDF vs PID closed loop control on these motors. This should provide more responsive, yet stable, speed control. PIDF adds Feedforward control to the basic PID control loop. Feedforward is useful when controlling a motor's speed because it "anticipates" how much the control voltage must change to achieve a new speed set-point, rather than requiring the integrated error to change sufficiently. The PIDF values were chosen to provide responsive, yet stable, speed control on a lightly loaded motor. The more heavily a motor is loaded (drag or friction), the more noticable the PIDF improvement will be. Fixes startup crash on Android 10 Fixes ftc_app issue #712 (thanks to FROGbots-4634) Fixes ftc_app issue #542 Allows "A" and lowercase letters when naming device through RC and DS apps. Version 5.2 (20190905-083277) Fixes extra-wide margins on settings activities, and placement of the new configuration button Adds Skystone Vuforia image target data. Includes sample Skystone Vuforia Navigation op modes (Java). Includes sample Skystone Vuforia Navigation op modes (Blocks). Adds TensorFlow inference model (.tflite) for Skystone game elements. Includes sample Skystone TensorFlow op modes (Java). Includes sample Skystone TensorFlow op modes (Blocks). Removes older (season-specific) sample op modes. Includes 64-bit support (to comply with Google Play requirements). Protects against Stuck OpModes when a Restart Robot is requested. (Thanks to FROGbots-4634) (ftc_app issue #709) Blocks related changes: Fixes bug with blocks generated code when hardware device name is a java or javascript reserved word. Shows generated java code for blocks, even when hardware items are missing from the active configuration. Displays warning icon when outdated Vuforia and TensorFlow blocks are used (SkyStone issue #27) Version 5.1 (20190820-222104) Defines default PIDF parameters for the following motors: REV Core Hex Motor REV 20:1 HD Hex Motor REV 40:1 HD Hex Motor Adds back button when running on a device without a system back button (such as a Control Hub) Allows a REV Control Hub to update the firmware on a REV Expansion Hub via USB Fixes SkyStone issue #9 Fixes ftc_app issue #715 Prevents extra DS User clicks by filtering based on current state. Prevents incorrect DS UI state changes when receiving new OpMode list from RC Adds support for REV Color Sensor V3 Adds a manual-refresh DS Camera Stream for remotely viewing RC camera frames. To show the stream on the DS, initialize but do not run a stream-enabled opmode, select the Camera Stream option in the DS menu, and tap the image to refresh. This feature is automatically enabled when using Vuforia or TFOD—no additional RC configuration is required for typical use cases. To hide the stream, select the same menu item again. Note that gamepads are disabled and the selected opmode cannot be started while the stream is open as a safety precaution. To use custom streams, consult the API docs for CameraStreamServer#setSource and CameraStreamSource. Adds many Star Wars sounds to RobotController resources. Added SKYSTONE Sounds Chooser Sample Program. Switches out startup, connect chimes, and error/warning sounds for Star Wars sounds Updates OnBot Java to use a WebSocket for communication with the robot The OnBot Java page no longer has to do a full refresh when a user switches from editing one file to another Known issues: Camera Stream The Vuforia camera stream inherits the issues present in the phone preview (namely ftc_app issue #574). This problem does not affect the TFOD camera stream even though it receives frames from Vuforia. The orientation of the stream frames may not always match the phone preview. For now, these frames may be rotated manually via a custom CameraStreamSource if desired. OnBotJava Browser back button may not always work correctly It's possible for a build to be queued, but not started. The OnBot Java build console will display a warning if this occurs. A user might not realize they are editing a different file if the user inadvertently switches from one file to another since this switch is now seamless. The name of the currently open file is displayed in the browser tab. Version 5.0 (built on 19.06.14) Support for the REV Robotics Control Hub. Adds a Java preview pane to the Blocks editor. Adds a new offline export feature to the Blocks editor. Display wifi channel in Network circle on Driver Station. Adds calibration for Logitech C270 Updates build tooling and target SDK. Compliance with Google's permissions infrastructure (Required after build tooling update). Keep Alives to mitigate the Motorola wifi scanning problem. Telemetry substitute no longer necessary. Improves Vuforia error reporting. Fixes ftctechnh/ftc_app issues 621, 713. Miscellaneous bug fixes and improvements. Version 4.3 (built on 18.10.31) Includes missing TensorFlow-related libraries and files. Version 4.2 (built on 18.10.30) Includes fix to avoid deadlock situation with WatchdogMonitor which could result in USB communication errors. Comm error appeared to require that user disconnect USB cable and restart the Robot Controller app to recover. robotControllerLog.txt would have error messages that included the words "E RobotCore: lynx xmit lock: #### abandoning lock:" Includes fix to correctly list the parent module address for a REV Robotics Expansion Hub in a configuration (.xml) file. Bug in versions 4.0 and 4.1 would incorrect list the address module for a parent REV Robotics device as "1". If the parent module had a higher address value than the daisy-chained module, then this bug would prevent the Robot Controller from communicating with the downstream Expansion Hub. Added requirement for ACCESS_COARSE_LOCATION to allow a Driver Station running Android Oreo to scan for Wi-Fi Direct devices. Added google() repo to build.gradle because aapt2 must be downloaded from the google() repository beginning with version 3.2 of the Android Gradle Plugin. Important Note: Android Studio users will need to be connected to the Internet the first time build the ftc_app project. Internet connectivity is required for the first build so the appropriate files can be downloaded from the Google repository. Users should not need to be connected to the Internet for subsequent builds. This should also fix buid issue where Android Studio would complain that it "Could not find com.android.tools.lint:lint-gradle:26.1.4" (or similar). Added support for REV Spark Mini motor controller as part of the configuration menu for a servo/PWM port on the REV Expansion Hub. Provide examples for playing audio files in an Op Mode. Block Development Tool Changes Includes a fix for a problem with the Velocity blocks that were reported in the FTC Technology forum (Blocks Programming subforum). Change the "Save completed successfully." message to a white color so it will contrast with a green background. Fixed the "Download image" feature so it will work if there are text blocks in the op mode. Introduce support for Google's TensorFlow Lite technology for object detetion for 2018-2019 game. TensorFlow lite can recognize Gold Mineral and Silver Mineral from 2018-2019 game. Example Java and Block op modes are included to show how to determine the relative position of the gold block (left, center, right). Version 4.1 (released on 18.09.24) Changes include: Fix to prevent crash when deprecated configuration annotations are used. Change to allow FTC Robot Controller APK to be auto-updated using FIRST Global Control Hub update scripts. Removed samples for non supported / non legal hardware. Improvements to Telemetry.addData block with "text" socket. Updated Blocks sample op mode list to include Rover Ruckus Vuforia example. Update SDK library version number. Version 4.0 (released on 18.09.12) Changes include: Initial support for UVC compatible cameras If UVC camera has a unique serial number, RC will detect and enumerate by serial number. If UVC camera lacks a unique serial number, RC will only support one camera of that type connected. Calibration settings for a few cameras are included (see TeamCode/src/main/res/xml/teamwebcamcalibrations.xml for details). User can upload calibration files from Program and Manage web interface. UVC cameras seem to draw a fair amount of electrical current from the USB bus. This does not appear to present any problems for the REV Robotics Control Hub. This does seem to create stability problems when using some cameras with an Android phone-based Robot Controller. FTC Tech Team is investigating options to mitigate this issue with the phone-based Robot Controllers. Updated sample Vuforia Navigation and VuMark Op Modes to demonstrate how to use an internal phone-based camera and an external UVC webcam. Support for improved motor control. REV Robotics Expansion Hub firmware 1.8 and greater will support a feed forward mechanism for closed loop motor control. FTC SDK has been modified to support PIDF coefficients (proportional, integral, derivative, and feed forward). FTC Blocks development tool modified to include PIDF programming blocks. Deprecated older PID-related methods and variables. REV's 1.8.x PIDF-related changes provide a more linear and accurate way to control a motor. Wireless Added 5GHz support for wireless channel changing for those devices that support it. Tested with Moto G5 and E4 phones. Also tested with other (currently non-approved) phones such as Samsung Galaxy S8. Improved Expansion Hub firmware update support in Robot Controller app Changes to make the system more robust during the firmware update process (when performed through Robot Controller app). User no longer has to disconnect a downstream daisy-chained Expansion Hub when updating an Expansion Hub's firmware. If user is updating an Expansion Hub's firmware through a USB connection, he/she does not have to disconnect RS485 connection to other Expansion Hubs. The user still must use a USB connection to update an Expansion Hub's firmware. The user cannot update the Expansion Hub firmware for a downstream device that is daisy chained through an RS485 connection. If an Expansion Hub accidentally gets "bricked" the Robot Controller app is now more likely to recognize the Hub when it scans the USB bus. Robot Controller app should be able to detect an Expansion Hub, even if it accidentally was bricked in a previous update attempt. Robot Controller app should be able to install the firmware onto the Hub, even if if accidentally was bricked in a previous update attempt. Resiliency FTC software can detect and enable an FTDI reset feature that is available with REV Robotics v1.8 Expansion Hub firmware and greater. When enabled, the Expansion Hub can detect if it hasn't communicated with the Robot Controller over the FTDI (USB) connection. If the Hub hasn't heard from the Robot Controller in a while, it will reset the FTDI connection. This action helps system recover from some ESD-induced disruptions. Various fixes to improve reliability of FTC software. Blocks Fixed errors with string and list indices in blocks export to java. Support for USB connected UVC webcams. Refactored optimized Blocks Vuforia code to support Rover Ruckus image targets. Added programming blocks to support PIDF (proportional, integral, derivative and feed forward) motor control. Added formatting options (under Telemetry and Miscellaneous categories) so user can set how many decimal places to display a numerical value. Support to play audio files (which are uploaded through Blocks web interface) on Driver Station in addition to the Robot Controller. Fixed bug with Download Image of Blocks feature. Support for REV Robotics Blinkin LED Controller. Support for REV Robotics 2m Distance Sensor. Added support for a REV Touch Sensor (no longer have to configure as a generic digital device). Added blocks for DcMotorEx methods. These are enhanced methods that you can use when supported by the motor controller hardware. The REV Robotics Expansion Hub supports these enhanced methods. Enhanced methods include methods to get/set motor velocity (in encoder pulses per second), get/set PIDF coefficients, etc.. Modest Improvements in Logging Decrease frequency of battery checker voltage statements. Removed non-FTC related log statements (wherever possible). Introduced a "Match Logging" feature. Under "Settings" a user can enable/disable this feature (it's disabled by default). If enabled, user provides a "Match Number" through the Driver Station user interface (top of the screen). The Match Number is used to create a log file specifically with log statements from that particular Op Mode run. Match log files are stored in /sdcard/FIRST/matlogs on the Robot Controller. Once an op mode run is complete, the Match Number is cleared. This is a convenient way to create a separate match log with statements only related to a specific op mode run. New Devices Support for REV Robotics Blinkin LED Controller. Support for REV Robotics 2m Distance Sensor. Added configuration option for REV 20:1 HD Hex Motor. Added support for a REV Touch Sensor (no longer have to configure as a generic digital device). Miscellaneous Fixed some errors in the definitions for acceleration and velocity in our javadoc documentation. Added ability to play audio files on Driver Station When user is configuring an Expansion Hub, the LED on the Expansion Hub will change blink pattern (purple-cyan) to indicate which Hub is currently being configured. Renamed I2cSensorType to I2cDeviceType. Added an external sample Op Mode that demonstrates localization using 2018-2019 (Rover Ruckus presented by QualComm) Vuforia targets. Added an external sample Op Mode that demonstrates how to use the REV Robotics 2m Laser Distance Sensor. Added an external sample Op Mode that demonstrates how to use the REV Robotics Blinkin LED Controller. Re-categorized external Java sample Op Modes to "TeleOp" instead of "Autonomous". Known issues: Initial support for UVC compatible cameras UVC cameras seem to draw significant amount of current from the USB bus. This does not appear to present any problems for the REV Robotics Control Hub. This does seem to create stability problems when using some cameras with an Android phone-based Robot Controller. FTC Tech Team is investigating options to mitigate this issue with the phone-based Robot Controllers. There might be a possible deadlock which causes the RC to become unresponsive when using a UVC webcam with a Nougat Android Robot Controller. Wireless When user selects a wireless channel, this channel does not necessarily persist if the phone is power cycled. Tech Team is hoping to eventually address this issue in a future release. Issue has been present since apps were introduced (i.e., it is not new with the v4.0 release). Wireless channel is not currently displayed for WiFi Direct connections. Miscellaneous The blink indication feature that shows which Expansion Hub is currently being configured does not work for a newly created configuration file. User has to first save a newly created configuration file and then close and re-edit the file in order for blink indicator to work. Version 3.6 (built on 17.12.18) Changes include: Blocks Changes Uses updated Google Blockly software to allow users to edit their op modes on Apple iOS devices (including iPad and iPhone). Improvement in Blocks tool to handle corrupt op mode files. Autonomous op modes should no longer get switched back to tele-op after re-opening them to be edited. The system can now detect type mismatches during runtime and alert the user with a message on the Driver Station. Updated javadoc documentation for setPower() method to reflect correct range of values (-1 to +1). Modified VuforiaLocalizerImpl to allow for user rendering of frames Added a user-overrideable onRenderFrame() method which gets called by the class's renderFrame() method. Version 3.5 (built on 17.10.30) Changes with version 3.5 include: Introduced a fix to prevent random op mode stops, which can occur after the Robot Controller app has been paused and then resumed (for example, when a user temporarily turns off the display of the Robot Controller phone, and then turns the screen back on). Introduced a fix to prevent random op mode stops, which were previously caused by random peer disconnect events on the Driver Station. Fixes issue where log files would be closed on pause of the RC or DS, but not re-opened upon resume. Fixes issue with battery handler (voltage) start/stop race. Fixes issue where Android Studio generated op modes would disappear from available list in certain situations. Fixes problem where OnBot Java would not build on REV Robotics Control Hub. Fixes problem where OnBot Java would not build if the date and time on the Robot Controller device was "rewound" (set to an earlier date/time). Improved error message on OnBot Java that occurs when renaming a file fails. Removed unneeded resources from android.jar binaries used by OnBot Java to reduce final size of Robot Controller app. Added MR_ANALOG_TOUCH_SENSOR block to Blocks Programming Tool. Version 3.4 (built on 17.09.06) Changes with version 3.4 include: Added telemetry.update() statement for BlankLinearOpMode template. Renamed sample Block op modes to be more consistent with Java samples. Added some additional sample Block op modes. Reworded OnBot Java readme slightly. Version 3.3 (built on 17.09.04) This version of the software includes improves for the FTC Blocks Programming Tool and the OnBot Java Programming Tool. Changes with verion 3.3 include: Android Studio ftc_app project has been updated to use Gradle Plugin 2.3.3. Android Studio ftc_app project is already using gradle 3.5 distribution. Robot Controller log has been renamed to /sdcard/RobotControllerLog.txt (note that this change was actually introduced w/ v3.2). Improvements in I2C reliability. Optimized I2C read for REV Expansion Hub, with v1.7 firmware or greater. Updated all external/samples (available through OnBot and in Android project folder). Vuforia Added support for VuMarks that will be used for the 2017-2018 season game. Blocks Update to latest Google Blockly release. Sample op modes can be selected as a template when creating new op mode. Fixed bug where the blocks would disappear temporarily when mouse button is held down. Added blocks for Range.clip and Range.scale. User can now disable/enable Block op modes. Fix to prevent occasional Blocks deadlock. OnBot Java Significant improvements with autocomplete function for OnBot Java editor. Sample op modes can be selected as a template when creating new op mode. Fixes and changes to complete hardware setup feature. Updated (and more useful) onBot welcome message. Known issues: Android Studio After updating to the new v3.3 Android Studio project folder, if you get error messages indicating "InvalidVirtualFileAccessException" then you might need to do a File->Invalidate Caches / Restart to clear the error. OnBot Java Sometimes when you push the build button to build all op modes, the RC returns an error message that the build failed. If you press the build button a second time, the build typically suceeds. Version 3.2 (built on 17.08.02) This version of the software introduces the "OnBot Java" Development Tool. Similar to the FTC Blocks Development Tool, the FTC OnBot Java Development Tool allows a user to create, edit and build op modes dynamically using only a Javascript-enabled web browser. The OnBot Java Development Tool is an integrated development environment (IDE) that is served up by the Robot Controller. Op modes are created and edited using a Javascript-enabled browser (Google Chromse is recommended). Op modes are saved on the Robot Controller Android device directly. The OnBot Java Development Tool provides a Java programming environment that does NOT need Android Studio. Changes with version 3.2 include: Enhanced web-based development tools Introduction of OnBot Java Development Tool. Web-based programming and management features are "always on" (user no longer needs to put Robot Controller into programming mode). Web-based management interface (where user can change Robot Controller name and also easily download Robot Controller log file). OnBot Java, Blocks and Management features available from web based interface. Blocks Programming Development Tool: Changed "LynxI2cColorRangeSensor" block to "REV Color/range sensor" block. Fixed tooltip for ColorSensor.isLightOn block. Added blocks for ColorSensor.getNormalizedColors and LynxI2cColorRangeSensor.getNormalizedColors. Added example op modes for digital touch sensor and REV Robotics Color Distance sensor. User selectable color themes. Includes many minor enhancements and fixes (too numerous to list). Known issues: Auto complete function is incomplete and does not support the following (for now): Access via this keyword Access via super keyword Members of the super cloass, not overridden by the class Any methods provided in the current class Inner classes Can't handle casted objects Any objects coming from an parenthetically enclosed expression Version 3.10 (built on 17.05.09) This version of the software provides support for the REV Robotics Expansion Hub. This version also includes improvements in the USB communication layer in an effort to enhance system resiliency. If you were using a 2.x version of the software previously, updating to version 3.1 requires that you also update your Driver Station software in addition to updating the Robot Controller software. Also note that in version 3.10 software, the setMaxSpeed and getMaxSpeed methods are no longer available (not deprecated, they have been removed from the SDK). Also note that the the new 3.x software incorporates motor profiles that a user can select as he/she configures the robot. Changes include: Blocks changes Added VuforiaTrackableDefaultListener.getPose and Vuforia.trackPose blocks. Added optimized blocks support for Vuforia extended tracking. Added atan2 block to the math category. Added useCompetitionFieldTargetLocations parameter to Vuforia.initialize block. If set to false, the target locations are placed at (0,0,0) with target orientation as specified in https://github.com/gearsincorg/FTCVuforiaDemo/blob/master/Robot_Navigation.java tutorial op mode. Incorporates additional improvements to USB comm layer to improve system resiliency (to recover from a greater number of communication disruptions). Additional Notes Regarding Version 3.00 (built on 17.04.13) In addition to the release changes listed below (see section labeled "Version 3.00 (built on 17.04.013)"), version 3.00 has the following important changes: Version 3.00 software uses a new version of the FTC Robocol (robot protocol). If you upgrade to v3.0 on the Robot Controller and/or Android Studio side, you must also upgrade the Driver Station software to match the new Robocol. Version 3.00 software removes the setMaxSpeed and getMaxSpeed methods from the DcMotor class. If you have an op mode that formerly used these methods, you will need to remove the references/calls to these methods. Instead, v3.0 provides the max speed information through the use of motor profiles that are selected by the user during robot configuration. Version 3.00 software currently does not have a mechanism to disable extra i2c sensors. We hope to re-introduce this function with a release in the near future. Version 3.00 (built on 17.04.13) *** Use this version of the software at YOUR OWN RISK!!! *** This software is being released as an "alpha" version. Use this version at your own risk! This pre-release software contains SIGNIFICANT changes, including changes to the Wi-Fi Direct pairing mechanism, rewrites of the I2C sensor classes, changes to the USB/FTDI layer, and the introduction of support for the REV Robotics Expansion Hub and the REV Robotics color-range-light sensor. These changes were implemented to improve the reliability and resiliency of the FTC control system. Please note, however, that version 3.00 is considered "alpha" code. This code is being released so that the FIRST community will have an opportunity to test the new REV Expansion Hub electronics module when it becomes available in May. The developers do not recommend using this code for critical applications (i.e., competition use). *** Use this version of the software at YOUR OWN RISK!!! *** Changes include: Major rework of sensor-related infrastructure. Includes rewriting sensor classes to implement synchronous I2C communication. Fix to reset Autonomous timer back to 30 seconds. Implementation of specific motor profiles for approved 12V motors (includes Tetrix, AndyMark, Matrix and REV models). Modest improvements to enhance Wi-Fi P2P pairing. Fixes telemetry log addition race. Publishes all the sources (not just a select few). Includes Block programming improvements Addition of optimized Vuforia blocks. Auto scrollbar to projects and sounds pages. Fixed blocks paste bug. Blocks execute after while-opModeIsActive loop (to allow for cleanup before exiting op mode). Added gyro integratedZValue block. Fixes bug with projects page for Firefox browser. Added IsSpeaking block to AndroidTextToSpeech. Implements support for the REV Robotics Expansion Hub Implements support for integral REV IMU (physically installed on I2C bus 0, uses same Bosch BNO055 9 axis absolute orientation sensor as Adafruit 9DOF abs orientation sensor). - Implements support for REV color/range/light sensor. Provides support to update Expansion Hub firmware through FTC SDK. Detects REV firmware version and records in log file. Includes support for REV Control Hub (note that the REV Control Hub is not yet approved for FTC use). Implements FTC Blocks programming support for REV Expansion Hub and sensor hardware. Detects and alerts when I2C device disconnect. Version 2.62 (built on 17.01.07) Added null pointer check before calling modeToByte() in finishModeSwitchIfNecessary method for ModernRoboticsUsbDcMotorController class. Changes to enhance Modern Robotics USB protocol robustness. Version 2.61 (released on 16.12.19) Blocks Programming mode changes: Fix to correct issue when an exception was thrown because an OpticalDistanceSensor object appears twice in the hardware map (the second time as a LightSensor). Version 2.6 (released on 16.12.16) Fixes for Gyro class: Improve (decrease) sensor refresh latency. fix isCalibrating issues. Blocks Programming mode changes: Blocks now ignores a device in the configuration xml if the name is empty. Other devices work in configuration work fine. Version 2.5 (internal release on released on 16.12.13) Blocks Programming mode changes: Added blocks support for AdafruitBNO055IMU. Added Download Op Mode button to FtcBocks.html. Added support for copying blocks in one OpMode and pasting them in an other OpMode. The clipboard content is stored on the phone, so the programming mode server must be running. Modified Utilities section of the toolbox. In Programming Mode, display information about the active connections. Fixed paste location when workspace has been scrolled. Added blocks support for the android Accelerometer. Fixed issue where Blocks Upload Op Mode truncated name at first dot. Added blocks support for Android SoundPool. Added type safety to blocks for Acceleration. Added type safety to blocks for AdafruitBNO055IMU.Parameters. Added type safety to blocks for AnalogInput. Added type safety to blocks for AngularVelocity. Added type safety to blocks for Color. Added type safety to blocks for ColorSensor. Added type safety to blocks for CompassSensor. Added type safety to blocks for CRServo. Added type safety to blocks for DigitalChannel. Added type safety to blocks for ElapsedTime. Added type safety to blocks for Gamepad. Added type safety to blocks for GyroSensor. Added type safety to blocks for IrSeekerSensor. Added type safety to blocks for LED. Added type safety to blocks for LightSensor. Added type safety to blocks for LinearOpMode. Added type safety to blocks for MagneticFlux. Added type safety to blocks for MatrixF. Added type safety to blocks for MrI2cCompassSensor. Added type safety to blocks for MrI2cRangeSensor. Added type safety to blocks for OpticalDistanceSensor. Added type safety to blocks for Orientation. Added type safety to blocks for Position. Added type safety to blocks for Quaternion. Added type safety to blocks for Servo. Added type safety to blocks for ServoController. Added type safety to blocks for Telemetry. Added type safety to blocks for Temperature. Added type safety to blocks for TouchSensor. Added type safety to blocks for UltrasonicSensor. Added type safety to blocks for VectorF. Added type safety to blocks for Velocity. Added type safety to blocks for VoltageSensor. Added type safety to blocks for VuforiaLocalizer.Parameters. Added type safety to blocks for VuforiaTrackable. Added type safety to blocks for VuforiaTrackables. Added type safety to blocks for enums in AdafruitBNO055IMU.Parameters. Added type safety to blocks for AndroidAccelerometer, AndroidGyroscope, AndroidOrientation, and AndroidTextToSpeech. Version 2.4 (released on 16.11.13) Fix to avoid crashing for nonexistent resources. Blocks Programming mode changes: Added blocks to support OpenGLMatrix, MatrixF, and VectorF. Added blocks to support AngleUnit, AxesOrder, AxesReference, CameraDirection, CameraMonitorFeedback, DistanceUnit, and TempUnit. Added blocks to support Acceleration. Added blocks to support LinearOpMode.getRuntime. Added blocks to support MagneticFlux and Position. Fixed typos. Made blocks for ElapsedTime more consistent with other objects. Added blocks to support Quaternion, Velocity, Orientation, AngularVelocity. Added blocks to support VuforiaTrackables, VuforiaTrackable, VuforiaLocalizer, VuforiaTrackableDefaultListener. Fixed a few blocks. Added type checking to new blocks. Updated to latest blockly. Added default variable blocks to navigation and matrix blocks. Fixed toolbox entry for openGLMatrix_rotation_withAxesArgs. When user downloads Blocks-generated op mode, only the .blk file is downloaded. When user uploads Blocks-generated op mode (.blk file), Javascript code is auto generated. Added DbgLog support. Added logging when a blocks file is read/written. Fixed bug to properly render blocks even if missing devices from configuration file. Added support for additional characters (not just alphanumeric) for the block file names (for download and upload). Added support for OpMode flavor (“Autonomous” or “TeleOp”) and group. Changes to Samples to prevent tutorial issues. Incorporated suggested changes from public pull 216 (“Replace .. paths”). Remove Servo Glitches when robot stopped. if user hits “Cancels” when editing a configuration file, clears the unsaved changes and reverts to original unmodified configuration. Added log info to help diagnose why the Robot Controller app was terminated (for example, by watch dog function). Added ability to transfer log from the controller. Fixed inconsistency for AngularVelocity Limit unbounded growth of data for telemetry. If user does not call telemetry.update() for LinearOpMode in a timely manner, data added for telemetry might get lost if size limit is exceeded. Version 2.35 (released on 16.10.06) Blockly programming mode - Removed unnecesary idle() call from blocks for new project. Version 2.30 (released on 16.10.05) Blockly programming mode: Mechanism added to save Blockly op modes from Programming Mode Server onto local device To avoid clutter, blocks are displayed in categorized folders Added support for DigitalChannel Added support for ModernRoboticsI2cCompassSensor Added support for ModernRoboticsI2cRangeSensor Added support for VoltageSensor Added support for AnalogInput Added support for AnalogOutput Fix for CompassSensor setMode block Vuforia Fix deadlock / make camera data available while Vuforia is running. Update to Vuforia 6.0.117 (recommended by Vuforia and Google to close security loophole). Fix for autonomous 30 second timer bug (where timer was in effect, even though it appeared to have timed out). opModeIsActive changes to allow cleanup after op mode is stopped (with enforced 2 second safety timeout). Fix to avoid reading i2c twice. Updated sample Op Modes. Improved logging and fixed intermittent freezing. Added digital I/O sample. Cleaned up device names in sample op modes to be consistent with Pushbot guide. Fix to allow use of IrSeekerSensorV3. Version 2.20 (released on 16.09.08) Support for Modern Robotics Compass Sensor. Support for Modern Robotics Range Sensor. Revise device names for Pushbot templates to match the names used in Pushbot guide. Fixed bug so that IrSeekerSensorV3 device is accessible as IrSeekerSensor in hardwareMap. Modified computer vision code to require an individual Vuforia license (per legal requirement from PTC). Minor fixes. Blockly enhancements: Support for Voltage Sensor. Support for Analog Input. Support for Analog Output. Support for Light Sensor. Support for Servo Controller. Version 2.10 (released on 16.09.03) Support for Adafruit IMU. Improvements to ModernRoboticsI2cGyro class Block on reset of z axis. isCalibrating() returns true while gyro is calibration. Updated sample gyro program. Blockly enhancements support for android.graphics.Color. added support for ElapsedTime. improved look and legibility of blocks. support for compass sensor. support for ultrasonic sensor. support for IrSeeker. support for LED. support for color sensor. support for CRServo prompt user to configure robot before using programming mode. Provides ability to disable audio cues. various bug fixes and improvements. Version 2.00 (released on 16.08.19) This is the new release for the upcoming 2016-2017 FIRST Tech Challenge Season. Channel change is enabled in the FTC Robot Controller app for Moto G 2nd and 3rd Gen phones. Users can now use annotations to register/disable their Op Modes. Changes in the Android SDK, JDK and build tool requirements (minsdk=19, java 1.7, build tools 23.0.3). Standardized units in analog input. Cleaned up code for existing analog sensor classes. setChannelMode and getChannelMode were REMOVED from the DcMotorController class. This is important - we no longer set the motor modes through the motor controller. setMode and getMode were added to the DcMotor class. ContinuousRotationServo class has been added to the FTC SDK. Range.clip() method has been overloaded so it can support this operation for int, short and byte integers. Some changes have been made (new methods added) on how a user can access items from the hardware map. Users can now set the zero power behavior for a DC motor so that the motor will brake or float when power is zero. Prototype Blockly Programming Mode has been added to FTC Robot Controller. Users can place the Robot Controller into this mode, and then use a device (such as a laptop) that has a Javascript enabled browser to write Blockly-based Op Modes directly onto the Robot Controller. Users can now configure the robot remotely through the FTC Driver Station app. Android Studio project supports Android Studio 2.1.x and compile SDK Version 23 (Marshmallow). Vuforia Computer Vision SDK integrated into FTC SDK. Users can use sample vision targets to get localization information on a standard FTC field. Project structure has been reorganized so that there is now a TeamCode package that users can use to place their local/custom Op Modes into this package. Inspection function has been integrated into the FTC Robot Controller and Driver Station Apps (Thanks Team HazMat… 9277 & 10650!). Audio cues have been incorporated into FTC SDK. Swap mechanism added to FTC Robot Controller configuration activity. For example, if you have two motor controllers on a robot, and you misidentified them in your configuration file, you can use the Swap button to swap the devices within the configuration file (so you do not have to manually re-enter in the configuration info for the two devices). Fix mechanism added to all user to replace an electronic module easily. For example, suppose a servo controller dies on your robot. You replace the broken module with a new module, which has a different serial number from the original servo controller. You can use the Fix button to automatically reconfigure your configuration file to use the serial number of the new module. Improvements made to fix resiliency and responsiveness of the system. For LinearOpMode the user now must for a telemetry.update() to update the telemetry data on the driver station. This update() mechanism ensures that the driver station gets the updated data properly and at the same time. The Auto Configure function of the Robot Controller is now template based. If there is a commonly used robot configuration, a template can be created so that the Auto Configure mechanism can be used to quickly configure a robot of this type. The logic to detect a runaway op mode (both in the LinearOpMode and OpMode types) and to abort the run, then auto recover has been improved/implemented. Fix has been incorporated so that Logitech F310 gamepad mappings will be correct for Marshmallow users. Release 16.07.08 For the ftc_app project, the gradle files have been modified to support Android Studio 2.1.x. Release 16.03.30 For the MIT App Inventor, the design blocks have new icons that better represent the function of each design component. Some changes were made to the shutdown logic to ensure the robust shutdown of some of our USB services. A change was made to LinearOpMode so as to allow a given instance to be executed more than once, which is required for the App Inventor. Javadoc improved/updated. Release 16.03.09 Changes made to make the FTC SDK synchronous (significant change!) waitOneFullHardwareCycle() and waitForNextHardwareCycle() are no longer needed and have been deprecated. runOpMode() (for a LinearOpMode) is now decoupled from the system's hardware read/write thread. loop() (for an OpMode) is now decoupled from the system's hardware read/write thread. Methods are synchronous. For example, if you call setMode(DcMotorController.RunMode.RESET_ENCODERS) for a motor, the encoder is guaranteed to be reset when the method call is complete. For legacy module (NXT compatible), user no longer has to toggle between read and write modes when reading from or writing to a legacy device. Changes made to enhance reliability/robustness during ESD event. Changes made to make code thread safe. Debug keystore added so that user-generated robot controller APKs will all use the same signed key (to avoid conflicts if a team has multiple developer laptops for example). Firmware version information for Modern Robotics modules are now logged. Changes made to improve USB comm reliability and robustness. Added support for voltage indicator for legacy (NXT-compatible) motor controllers. Changes made to provide auto stop capabilities for op modes. A LinearOpMode class will stop when the statements in runOpMode() are complete. User does not have to push the stop button on the driver station. If an op mode is stopped by the driver station, but there is a run away/uninterruptible thread persisting, the app will log an error message then force itself to crash to stop the runaway thread. Driver Station UI modified to display lowest measured voltage below current voltage (12V battery). Driver Station UI modified to have color background for current voltage (green=good, yellow=caution, red=danger, extremely low voltage). javadoc improved (edits and additional classes). Added app build time to About activity for driver station and robot controller apps. Display local IP addresses on Driver Station About activity. Added I2cDeviceSynchImpl. Added I2cDeviceSync interface. Added seconds() and milliseconds() to ElapsedTime for clarity. Added getCallbackCount() to I2cDevice. Added missing clearI2cPortActionFlag. Added code to create log messages while waiting for LinearOpMode shutdown. Fix so Wifi Direct Config activity will no longer launch multiple times. Added the ability to specify an alternate i2c address in software for the Modern Robotics gyro. Release 16.02.09 Improved battery checker feature so that voltage values get refreshed regularly (every 250 msec) on Driver Station (DS) user interface. Improved software so that Robot Controller (RC) is much more resilient and “self-healing” to USB disconnects: If user attempts to start/restart RC with one or more module missing, it will display a warning but still start up. When running an op mode, if one or more modules gets disconnected, the RC & DS will display warnings,and robot will keep on working in spite of the missing module(s). If a disconnected module gets physically reconnected the RC will auto detect the module and the user will regain control of the recently connected module. Warning messages are more helpful (identifies the type of module that’s missing plus its USB serial number). Code changes to fix the null gamepad reference when users try to reference the gamepads in the init() portion of their op mode. NXT light sensor output is now properly scaled. Note that teams might have to readjust their light threshold values in their op modes. On DS user interface, gamepad icon for a driver will disappear if the matching gamepad is disconnected or if that gamepad gets designated as a different driver. Robot Protocol (ROBOCOL) version number info is displayed in About screen on RC and DS apps. Incorporated a display filter on pairing screen to filter out devices that don’t use the “-“ format. This filter can be turned off to show all WiFi Direct devices. Updated text in License file. Fixed formatting error in OpticalDistanceSensor.toString(). Fixed issue on with a blank (“”) device name that would disrupt WiFi Direct Pairing. Made a change so that the WiFi info and battery info can be displayed more quickly on the DS upon connecting to RC. Improved javadoc generation. Modified code to make it easier to support language localization in the future. Release 16.01.04 Updated compileSdkVersion for apps Prevent Wifi from entering power saving mode removed unused import from driver station Corrrected "Dead zone" joystick code. LED.getDeviceName and .getConnectionInfo() return null apps check for ROBOCOL_VERSION mismatch Fix for Telemetry also has off-by-one errors in its data string sizing / short size limitations error User telemetry output is sorted. added formatting variants to DbgLog and RobotLog APIs code modified to allow for a long list of op mode names. changes to improve thread safety of RobocolDatagramSocket Fix for "missing hardware leaves robot controller disconnected from driver station" error fix for "fast tapping of Init/Start causes problems" (toast is now only instantiated on UI thread). added some log statements for thread life cycle. moved gamepad reset logic inside of initActiveOpMode() for robustness changes made to mitigate risk of race conditions on public methods. changes to try and flag when WiFi Direct name contains non-printable characters. fix to correct race condition between .run() and .close() in ReadWriteRunnableStandard. updated FTDI driver made ReadWriteRunnableStanard interface public. fixed off-by-one errors in Command constructor moved specific hardware implmentations into their own package. moved specific gamepad implemnatations to the hardware library. changed LICENSE file to new BSD version. fixed race condition when shutting down Modern Robotics USB devices. methods in the ColorSensor classes have been synchronized. corrected isBusy() status to reflect end of motion. corrected "back" button keycode. the notSupported() method of the GyroSensor class was changed to protected (it should not be public). Release 15.11.04.001 Added Support for Modern Robotics Gyro. The GyroSensor class now supports the MR Gyro Sensor. Users can access heading data (about Z axis) Users can also access raw gyro data (X, Y, & Z axes). Example MRGyroTest.java op mode included. Improved error messages More descriptive error messages for exceptions in user code. Updated DcMotor API Enable read mode on new address in setI2cAddress Fix so that driver station app resets the gamepads when switching op modes. USB-related code changes to make USB comm more responsive and to display more explicit error messages. Fix so that USB will recover properly if the USB bus returns garbage data. Fix USB initializtion race condition. Better error reporting during FTDI open. More explicit messages during USB failures. Fixed bug so that USB device is closed if event loop teardown method was not called. Fixed timer UI issue Fixed duplicate name UI bug (Legacy Module configuration). Fixed race condition in EventLoopManager. Fix to keep references stable when updating gamepad. For legacy Matrix motor/servo controllers removed necessity of appending "Motor" and "Servo" to controller names. Updated HT color sensor driver to use constants from ModernRoboticsUsbLegacyModule class. Updated MR color sensor driver to use constants from ModernRoboticsUsbDeviceInterfaceModule class. Correctly handle I2C Address change in all color sensors Updated/cleaned up op modes. Updated comments in LinearI2cAddressChange.java example op mode. Replaced the calls to "setChannelMode" with "setMode" (to match the new of the DcMotor method). Removed K9AutoTime.java op mode. Added MRGyroTest.java op mode (demonstrates how to use MR Gyro Sensor). Added MRRGBExample.java op mode (demonstrates how to use MR Color Sensor). Added HTRGBExample.java op mode (demonstrates how to use HT legacy color sensor). Added MatrixControllerDemo.java (demonstrates how to use legacy Matrix controller). Updated javadoc documentation. Updated release .apk files for Robot Controller and Driver Station apps. Release 15.10.06.002 Added support for Legacy Matrix 9.6V motor/servo controller. Cleaned up build.gradle file. Minor UI and bug fixes for driver station and robot controller apps. Throws error if Ultrasonic sensor (NXT) is not configured for legacy module port 4 or 5. Release 15.08.03.001 New user interfaces for FTC Driver Station and FTC Robot Controller apps. An init() method is added to the OpMode class. For this release, init() is triggered right before the start() method. Eventually, the init() method will be triggered when the user presses an "INIT" button on driver station. The init() and loop() methods are now required (i.e., need to be overridden in the user's op mode). The start() and stop() methods are optional. A new LinearOpMode class is introduced. Teams can use the LinearOpMode mode to create a linear (not event driven) program model. Teams can use blocking statements like Thread.sleep() within a linear op mode. The API for the Legacy Module and Core Device Interface Module have been updated. Support for encoders with the Legacy Module is now working. The hardware loop has been updated for better performance. 324 2021-03-08
GitHub PoC patches for SNYK-JS-JQUERY-174006, CVE-2019-11358, CVE-2019-5428 28 2019-03-30
GitHub PoC patches for SNYK-JS-JQUERY-565129, SNYK-JS-JQUERY-567880, CVE-2020-1102, CVE-2020-11023, includes the patches for SNYK-JS-JQUERY-174006, CVE-2019-11358, CVE-2019-5428 27 2020-04-14
GitHub PoC A fix for CVE-2019-11358 (prototype pollution in jquery) 6 2019-07-18
GitHub PoC isacaya/CVE-2019-11358 1 2023-08-05
Exploit-DB jQuery 3.3.1 - Prototype Pollution & XSS Exploit 2025-04-08
GitHub PoC Vulnearability Report of the New Jersey official site 2022-05-23

Waratek protection

Outside Waratek scope

A Java vulnerability, but not one Waratek protects. It affects only Java on a user's desktop (applets, Web Start, JavaFX, the installer), sits in a product the Waratek agent can't be installed into, or is in a package we don't expect in business applications. The decision below says which.

  • Protection none
  • Action not pursued none
  • Review human Researcher
  • Record active
Decided by Manual classification of this CVE in the legacy dataset
Finding A manual classification set this CVE's status to Outside Waratek scope, but the CVE names a tracked product.

CVSS

6.1 MEDIUM v3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 2 metrics

We show the highest score from the newest CVSS version. Scores from different versions can't be compared, and the first score listed is sometimes a 0.0 placeholder.

VersionScoreBandVectorAssignerType
CVSS 3.1 6.1 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N NVD Primary published
CVSS 2.0 4.3 none AV:N/AC:M/Au:N/C:N/I:P/A:N NVD Primary

Affected software and releases

Oracle advisories

AdvisoryTypeQuarterProducts Oracle names in its risk matrix
Oracle Critical Patch Update October 2023 ↗ CPU 2023-Q4 Oracle Analytics / Mobile Service (jQuery) (12.2.1.4.0)
Oracle Critical Patch Update October 2021 ↗ CPU 2021-Q4 Oracle Hyperion / Hyperion Planning (jQuery) (11.1.2.4, 11.2.6.0)
Oracle Critical Patch Update July 2021 ↗ CPU 2021-Q3 Oracle Fusion Middleware / UI Platform (jQuery) (12.2.1.3.0)
Oracle Critical Patch Update April 2021 ↗ CPU 2021-Q2 Oracle Siebel CRM / UIF Open UI (jQuery) (21.2 and prior)
Oracle Critical Patch Update January 2021 ↗ CPU 2021-Q1 Oracle Insurance Applications / Framework Administrator IBFA (jQuery) (5.0.0.20, 5.1.1.03)
Oracle Supply Chain / Install (jQuery) (1.4.3)
Oracle Supply Chain / Installation (jQuery) (6.1)
Oracle Critical Patch Update October 2020 ↗ CPU 2020-Q4 Oracle Fusion Middleware / BI Publisher Security (jQuery) (5.5.0.0.0, 12.2.1.3.0, 12.2.1.4.0)
Oracle Fusion Middleware / Runtime Engine (jQuery) (12.2.1.3.0, 12.2.1.4.0)
Oracle Retail Applications / Mobile POS (jQuery) (14.0, 14.1)
Oracle Critical Patch Update July 2020 ↗ CPU 2020-Q3 Oracle Financial Services Applications / User Interface (jQuery) (8.0.6-8.0.8)
Oracle PeopleSoft / Expenses (jQuery) (9.2)
Oracle Critical Patch Update April 2020 ↗ CPU 2020-Q2 Oracle Communications Applications / IDIH Visualization (jQuery) (8.0.0, 8.1.0, 8.2.0, 8.2.1)
Oracle Communications Applications / Mediation Engine, Calls Page (jQuery) (3.4.0, 4.0.0, 4.1.0)
Oracle Communications Applications / WSC-Console (jQuery) (7.2)
Oracle Enterprise Manager / Service Level Agreements (jQuery) (13.2.0.0, 13.3.0.0)
Oracle Fusion Middleware / Advanced UI (jQuery) (12.2.1.3.0)
Oracle Fusion Middleware / Install (jQuery) (12.2.1.3.0)
Oracle Fusion Middleware / Studio (jQuery) (1.6)
Oracle Knowledge / Answer Flow (jQuery) (8.6.0-8.6.3)
Oracle Systems / Software (jQuery) (2.3.0)
Oracle Critical Patch Update January 2020 ↗ CPU 2020-Q1 Oracle Communications Applications / General (jQuery) (6.0, 6.1, 6.2, 6.3)
Oracle Communications Applications / Maps (jQuery) (7.3, 7.4)
Oracle Construction and Engineering / UI (jQuery) (15.2.18, 16.2.11, 17.12.6, 18.8.8.1)
Oracle Enterprise Manager / Oracle Flow Builder (jQuery) (12.5.0.3, 13.1.0.1, 13.2.0.1, 13.3.0.1)
Oracle JD Edwards / Web Runtime SEC (jQuery) (9.2)
Oracle JD Edwards / Web Runtime SEC (jQuery) (9.2)
Oracle Systems / Software (jQuery) (8.5, 8.5.1)
Oracle Utilities Applications / Next Gen Mobile Application (jQuery) (2.3.0.1-2.3.0.3)
Oracle Utilities Applications / Next Gen Mobile Application (jQuery) (2.3.0.1-2.3.0.3)
Oracle Critical Patch Update October 2019 ↗ CPU 2019-Q4 Oracle Construction and Engineering / Core (jQuery) (16.1, 16.2, 17.7-17.12, 18.8)
Oracle Enterprise Manager / Load Testing for Web Apps (jQuery) (13.2, 13.3)
Oracle Enterprise Manager / Networking (jQuery) (12.3.3, 12.4.0)
Oracle Financial Services Applications / UI (jQuery) (8.0.6, 8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.6, 8.0.7)
Oracle Food and Beverage Applications / Oracle Hospitality Materials Control (18.1)
Oracle Fusion Middleware / ADF Faces (jQuery) (11.1.1.9.0, 12.1.3.0.0, 12.2.1.3.0)
Oracle Fusion Middleware / Console (jQuery) (10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0)
Oracle Fusion Middleware / Sample apps (jQuery) (12.1.3.0.0, 12.2.1.3.0)
Oracle Fusion Middleware / Web Container (jQuery) (11.1.1.9.0, 12.1.3.0.0, 12.2.1.3.0)
Oracle Health Sciences Applications / Cohort Explorer (jQuery) (3.1.0, 3.2.1, 3.3.1)
Oracle Health Sciences Applications / Security (jQuery) (7.1.1, 7.2.2)
Oracle PeopleSoft / Portal, Charting (jQuery) (8.56, 8.57)
Oracle Policy Automation / Core (jQuery) (10.4.6)
Oracle Policy Automation / Core (jQuery) (12.2.0-12.2.15)
Oracle Policy Automation / Determinations Engine (jQuery) (10.4.7, 12.1.0, 12.1.1, 12.2.0-12.2.15)
Oracle Retail Applications / Retail Science Engine (jQuery) (15.0, 16.0)
Oracle Siebel CRM / CG Mobile Connected (jQuery) (19.8 and prior)
Oracle Supply Chain / Supplier Portal (jQuery) (6.2.0.0, 6.2.1.0, 6.2.2.0, 6.2.3.0)
Oracle Support Tools / Libraries (jQuery) (2.12.36)
Oracle Critical Patch Update July 2019 ↗ CPU 2019-Q3 Oracle Communications Applications / Billing Care, Business Operations Center (jQuery) (7.5, 12.0)
Oracle Financial Services Applications / Core (jQuery) (2.4.0.0, 2.4.0.1)
Oracle Financial Services Applications / Infrastructure (jQuery) (7.3.3-7.3.5, 8.0.2-8.0.8)
Oracle Financial Services Applications / UI (jQuery) (2.4.0-2.7.1)
Oracle Financial Services Applications / UI (jQuery) (8.0.1, 8.0.2, 8.0.4, 8.0.5, 8.0.6)
Oracle Financial Services Applications / UI (jQuery) (8.0.2-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.6)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.4-8.0.8)
Oracle Financial Services Applications / UI (jQuery) (8.0.5, 8.0.6, 8.0.8)
Oracle Financial Services Applications / UI (jQuery) (8.0.5-8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.6, 8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.6, 8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.6, 8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.7)
Oracle Financial Services Applications / UI (jQuery) (8.0.7, 8.0.8)
Oracle Financial Services Applications / UI (jQuery) (8.0.8)
Oracle Hospitality Applications / Base (jQuery) (4.2, 4.2.1)
Oracle PeopleSoft Products / Mobile Application Platform (jQuery) (8.55, 8.56, 8.57)
Oracle Support Tools / One Command Installation Tool (jQuery) (19.1)

Oracle components and versions

FamilyComponentVersions, as Oracle lists themRead as
Oracle Analytics Mobile Service (jQuery) 12.2.1.4.0 12.2.1.4.0
Oracle Communications Applications Billing Care, Business Operations Center (jQuery) 7.5, 12.0 7.5 · 12.0
Oracle Communications Applications General (jQuery) 6.0, 6.1, 6.2, 6.3 6.0 · 6.1 · 6.2 · 6.3
Oracle Communications Applications IDIH Visualization (jQuery) 8.0.0, 8.1.0, 8.2.0, 8.2.1 8.0.0 · 8.1.0 · 8.2.0 · 8.2.1
Oracle Communications Applications Maps (jQuery) 7.3, 7.4 7.3 · 7.4
Oracle Communications Applications Mediation Engine, Calls Page (jQuery) 3.4.0, 4.0.0, 4.1.0 3.4.0 · 4.0.0 · 4.1.0
Oracle Communications Applications WSC-Console (jQuery) 7.2 7.2
Oracle Construction and Engineering Core (jQuery) 16.1, 16.2, 17.7-17.12, 18.8 16.1 · 16.2 · 18.8
Oracle Construction and Engineering UI (jQuery) 15.2.18, 16.2.11, 17.12.6, 18.8.8.1 15.2.18 · 16.2.11 · 17.12.6 · 18.8.8.1
Oracle Enterprise Manager Load Testing for Web Apps (jQuery) 13.2, 13.3 13.2 · 13.3
Oracle Enterprise Manager Networking (jQuery) 12.3.3, 12.4.0 12.3.3 · 12.4.0
Oracle Enterprise Manager Oracle Flow Builder (jQuery) 12.5.0.3, 13.1.0.1, 13.2.0.1, 13.3.0.1 12.5.0.3 · 13.1.0.1 · 13.2.0.1 · 13.3.0.1
Oracle Enterprise Manager Service Level Agreements (jQuery) 13.2.0.0, 13.3.0.0 13.2.0.0 · 13.3.0.0
Oracle Financial Services Applications Core (jQuery) 2.4.0.0, 2.4.0.1 2.4.0.0 · 2.4.0.1
Oracle Financial Services Applications Infrastructure (jQuery) 7.3.3-7.3.5, 8.0.2-8.0.8
Oracle Financial Services Applications UI (jQuery) 2.4.0-2.7.1 8.0.1 · 8.0.2 · 8.0.4 · 8.0.5 · 8.0.6 · 8.0.7 · 8.0.8
Oracle Financial Services Applications User Interface (jQuery) 8.0.6-8.0.8
Oracle Food and Beverage Applications Oracle Hospitality Materials Control 18.1 18.1
Oracle Fusion Middleware ADF Faces (jQuery) 11.1.1.9.0, 12.1.3.0.0, 12.2.1.3.0 11.1.1.9.0 · 12.1.3.0.0 · 12.2.1.3.0
Oracle Fusion Middleware Advanced UI (jQuery) 12.2.1.3.0 12.2.1.3.0
Oracle Fusion Middleware BI Publisher Security (jQuery) 5.5.0.0.0, 12.2.1.3.0, 12.2.1.4.0 5.5.0.0.0 · 12.2.1.3.0 · 12.2.1.4.0
Oracle Fusion Middleware Console (jQuery) 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 10.3.6.0.0 · 12.1.3.0.0 · 12.2.1.3.0
Oracle Fusion Middleware Install (jQuery) 12.2.1.3.0 12.2.1.3.0
Oracle Fusion Middleware Runtime Engine (jQuery) 12.2.1.3.0, 12.2.1.4.0 12.2.1.3.0 · 12.2.1.4.0
Oracle Fusion Middleware Sample apps (jQuery) 12.1.3.0.0, 12.2.1.3.0 12.1.3.0.0 · 12.2.1.3.0
Oracle Fusion Middleware Studio (jQuery) 1.6 1.6
Oracle Fusion Middleware UI Platform (jQuery) 12.2.1.3.0 12.2.1.3.0
Oracle Fusion Middleware Web Container (jQuery) 11.1.1.9.0, 12.1.3.0.0, 12.2.1.3.0 11.1.1.9.0 · 12.1.3.0.0 · 12.2.1.3.0
Oracle Health Sciences Applications Cohort Explorer (jQuery) 3.1.0, 3.2.1, 3.3.1 3.1.0 · 3.2.1 · 3.3.1
Oracle Health Sciences Applications Security (jQuery) 7.1.1, 7.2.2 7.1.1 · 7.2.2
Oracle Hospitality Applications Base (jQuery) 4.2, 4.2.1 4.2 · 4.2.1
Oracle Hyperion Hyperion Planning (jQuery) 11.1.2.4, 11.2.6.0 11.1.2.4 · 11.2.6.0
Oracle Insurance Applications Framework Administrator IBFA (jQuery) 5.0.0.20, 5.1.1.03 5.0.0.20 · 5.1.1.3
Oracle JD Edwards Web Runtime SEC (jQuery) 9.2 9.2
Oracle Knowledge Answer Flow (jQuery) 8.6.0-8.6.3
Oracle PeopleSoft Expenses (jQuery) 9.2 9.2
Oracle PeopleSoft Portal, Charting (jQuery) 8.56, 8.57 8.56 · 8.57
Oracle PeopleSoft Products Mobile Application Platform (jQuery) 8.55, 8.56, 8.57 8.55 · 8.56 · 8.57
Oracle Policy Automation Core (jQuery) 12.2.0-12.2.15 10.4.6
Oracle Policy Automation Determinations Engine (jQuery) 10.4.7, 12.1.0, 12.1.1, 12.2.0-12.2.15 10.4.7 · 12.1.0 · 12.1.1
Oracle Retail Applications Mobile POS (jQuery) 14.0, 14.1 14.0 · 14.1
Oracle Retail Applications Retail Science Engine (jQuery) 15.0, 16.0 15.0 · 16.0
Oracle Siebel CRM CG Mobile Connected (jQuery) 19.8 and prior
Oracle Siebel CRM UIF Open UI (jQuery) 21.2 and prior
Oracle Supply Chain Install (jQuery) 1.4.3 1.4.3
Oracle Supply Chain Installation (jQuery) 6.1 6.1
Oracle Supply Chain Supplier Portal (jQuery) 6.2.0.0, 6.2.1.0, 6.2.2.0, 6.2.3.0 6.2.0.0 · 6.2.1.0 · 6.2.2.0 · 6.2.3.0
Oracle Support Tools Libraries (jQuery) 2.12.36 2.12.36
Oracle Support Tools One Command Installation Tool (jQuery) 19.1 19.1
Oracle Systems Software (jQuery) 2.3.0 2.3.0 · 8.5 · 8.5.1
Oracle Utilities Applications Next Gen Mobile Application (jQuery) 2.3.0.1-2.3.0.3

Products and versions

105 products, 218 version entries
SourceVendorProductSchemeAffected versions
nvd backdropcms backdrop generic ≥ 1.11.0 and ＜ 1.11.9 · ≥ 1.12.0 and ＜ 1.12.6
nvd debian debian linux generic 8.0 · 9.0 · 10.0
nvd drupal drupal generic ≥ 7.0 and ＜ 7.66 · ≥ 8.5.0 and ＜ 8.5.15 · ≥ 8.6.0 and ＜ 8.6.15
nvd fedoraproject fedora generic 28 · 29 · 30
nvd joomla joomla\! generic ≥ 3.0.0 and ≤ 3.9.4
nvd jquery jquery generic ＜ 3.4.0
nvd juniper junos generic 21.2
nvd netapp oncommand system manager generic ≥ 3.0 and ≤ 3.1.3
nvd netapp snapcenter generic any version
nvd opensuse backports sle generic 15.0:sp1
nvd opensuse leap generic 15.1
nvd oracle agile product lifecycle management for process generic 6.1 · 6.2.0.0 · 6.2.1.0 · 6.2.2.0 · 6.2.3.0
nvd oracle application express generic ＜ 19.1
nvd oracle application service level management generic 13.2.0.0 · 13.3.0.0
nvd oracle application testing suite generic 12.5.0.3 · 13.1.0.1 · 13.2 · 13.2.0.1 · 13.3 · 13.3.0.1
nvd oracle banking digital experience generic 18.1 · 18.2 · 18.3 · 19.1 · 19.2 · 20.1
nvd oracle banking enterprise collections generic ≥ 2.7.0 and ≤ 2.8.0
nvd oracle banking platform generic ≥ 2.4.0 and ≤ 2.10.0
nvd oracle bi publisher generic 5.5.0.0.0 · 12.2.1.3.0 · 12.2.1.4.0
nvd oracle big data discovery generic 1.6
nvd oracle business process management suite generic 12.2.1.3.0 · 12.2.1.4.0
nvd oracle communications analytics generic 12.1.1
nvd oracle communications application session controller generic 3.8m0
nvd oracle communications billing and revenue management generic 7.5 · 7.5.0.23.0 · 12.0 · 12.0.0.3.0
nvd oracle communications diameter signaling router generic 8.0.0 · 8.1 · 8.2 · 8.2.1
nvd oracle communications eagle application processor generic ≥ 16.1.0 and ≤ 16.4.0
nvd oracle communications element manager generic 8.1.1 · 8.2.0 · 8.2.1
nvd oracle communications interactive session recorder generic ≥ 6.0 and ≤ 6.4
nvd oracle communications operations monitor generic 3.4 · 4.0 · ≥ 4.1 and ≤ 4.3 · 4.1.0
nvd oracle communications services gatekeeper generic 7.0
nvd oracle communications session report manager generic 8.1.1 · 8.2.0 · 8.2.1
nvd oracle communications session route manager generic 8.1.1 · 8.2.0 · 8.2.1
nvd oracle communications unified inventory management generic 7.3 · 7.4.0
nvd oracle communications webrtc session controller generic 7.2
nvd oracle diagnostic assistant generic 2.12.36
nvd oracle enterprise manager ops center generic 12.3.3 · 12.4.0 · 12.4.0.0
nvd oracle enterprise session border controller generic 8.4
nvd oracle financial services analytical applications infrastructure generic ≥ 7.3.3 and ≤ 7.3.5 · ≥ 8.0.2 and ≤ 8.1.0
nvd oracle financial services analytical applications reconciliation framework generic ≥ 8.0.4 and ≤ 8.0.7 · 8.1.0
nvd oracle financial services asset liability management generic ≥ 8.0.4 and ≤ 8.0.7 · 8.1.0
nvd oracle financial services balance sheet planning generic 8.0.8
nvd oracle financial services basel regulatory capital basic generic ≥ 8.0.4 and ≤ 8.0.7 · 8.1.0
nvd oracle financial services basel regulatory capital internal ratings based approach generic ≥ 8.0.4 and ≤ 8.0.7 · 8.1.0
nvd oracle financial services data foundation generic ≥ 8.0.4 and ≤ 8.0.8
nvd oracle financial services data governance for us regulatory reporting generic ≥ 8.0.6 and ≤ 8.0.9
nvd oracle financial services data integration hub generic ≥ 8.0.5 and ≤ 8.0.7 · 8.1.0
nvd oracle financial services enterprise financial performance analytics generic 8.0.6 · 8.0.7
nvd oracle financial services funds transfer pricing generic ≥ 8.0.4 and ≤ 8.0.7 · 8.1.0
nvd oracle financial services hedge management and ifrs valuations generic ≥ 8.0.4 and ≤ 8.0.7 · 8.1.0
nvd oracle financial services institutional performance analytics generic ≥ 8.0.4 and ≤ 8.0.7 · 8.1.0
nvd oracle financial services liquidity risk management generic 8.0.0.1.0 · 8.0.2 · 8.0.4.0.0 · 8.0.5.0.0 · 8.0.6
nvd oracle financial services liquidity risk measurement and management generic 8.0.7 · 8.0.8 · 8.1.0
nvd oracle financial services loan loss forecasting and provisioning generic ≥ 8.0.2 and ≤ 8.0.7 · 8.1.0
nvd oracle financial services market risk measurement and management generic 8.0.5 · 8.0.6 · 8.0.8
nvd oracle financial services price creation and discovery generic ≥ 8.0.4 and ≤ 8.0.7
nvd oracle financial services profitability management generic ≥ 8.0.4 and ≤ 8.0.7 · 8.1.0
nvd oracle financial services regulatory reporting for de nederlandsche bank generic 8.0.4
nvd oracle financial services regulatory reporting for european banking authority generic 8.0.6 · 8.0.7
nvd oracle financial services regulatory reporting for us federal reserve generic ≥ 8.0.4 and ≤ 8.0.7
nvd oracle financial services retail customer analytics generic ≥ 8.0.4 and ≤ 8.0.6
nvd oracle financial services retail performance analytics generic 8.0.6 · 8.0.7
nvd oracle financial services revenue management and billing generic 2.4.0.0 · 2.4.0.1
nvd oracle fusion middleware mapviewer generic 12.2.1.3.0
nvd oracle healthcare foundation generic 7.1.1 · 7.2.0 · 7.2.2 · 7.3.0
nvd oracle healthcare translational research generic 3.1.0 · 3.2.1 · 3.3.1 · 3.3.2 · 3.4.0
nvd oracle hospitality guest access generic 4.2.0 · 4.2.1
nvd oracle hospitality materials control generic 18.1
nvd oracle hospitality simphony generic 18.1 · 18.2 · ≥ 19.1.0 and ≤ 19.1.2
nvd oracle identity manager generic 12.2.1.3.0
nvd oracle insurance accounting analyzer generic 8.0.9
nvd oracle insurance allocation manager for enterprise profitability generic 8.0.8 · 8.1.0
nvd oracle insurance data foundation generic ≥ 8.0.4 and ≤ 8.0.7
nvd oracle insurance ifrs 17 analyzer generic 8.0.6 · 8.0.7
nvd oracle insurance insbridge rating and underwriting generic ≥ 5.0.0.0 and ≤ 5.6.0.0 · 5.6.1.0
nvd oracle insurance performance insight generic 8.0.7
nvd oracle jd edwards enterpriseone tools generic 9.2
nvd oracle jdeveloper generic 11.1.1.9.0 · 12.2.1.3.0 · 12.2.1.4.0
nvd oracle jdeveloper and adf generic 11.1.1.9.0 · 12.1.3.0.0 · 12.2.1.3.0
nvd oracle knowledge generic ≥ 8.6.0 and ≤ 8.6.3
nvd oracle peoplesoft enterprise peopletools generic 8.55 · 8.56 · 8.57 · 8.58
nvd oracle policy automation generic 10.4.7 · 12.1.0 · 12.1.1 · ≥ 12.2.0 and ≤ 12.2.15
nvd oracle policy automation connector for siebel generic 10.4.6
nvd oracle policy automation for mobile devices generic ≥ 12.2.0 and ≤ 12.2.15
nvd oracle primavera gateway generic 15.2.18 · ≥ 16.2.0 and ≤ 16.2.11 · ≥ 17.12.0 and ≤ 17.12.7 · ≥ 18.8.0 and ≤ 18.8.9 · ≥ 19.12.0 and ≤ 19.12.4
nvd oracle primavera unifier generic 16.1 · 16.2 · ≥ 17.7 and ≤ 17.12 · 18.8
nvd oracle real-time scheduler generic ≥ 2.3.0.1 and ≤ 2.3.0.3
nvd oracle rest data services generic 11.2.0.4 · 12.1.0.2 · 12.2.0.1 · 18c · 19c
nvd oracle retail back office generic 14.0 · 14.1
nvd oracle retail central office generic 14.0 · 14.1
nvd oracle retail customer insights generic 15.0 · 16.0
nvd oracle retail customer management and segmentation foundation generic 18.0 · 19.0
nvd oracle retail point-of-service generic 14.0 · 14.1
nvd oracle retail returns management generic 14.0 · 14.1
nvd oracle service bus generic 11.1.1.9.0 · 12.1.3.0.0 · 12.2.1.3.0
nvd oracle siebel mobile applications generic ≤ 19.8
nvd oracle siebel ui framework generic 20.8
nvd oracle storagetek tape analytics sw tool generic 2.3.0
nvd oracle system utilities generic 19.1
nvd oracle tape library acsls generic 8.5 · 8.5.1
nvd oracle transportation management generic 1.4.3
nvd oracle utilities mobile workforce management generic ≥ 2.3.0.1 and ≤ 2.3.0.3
nvd oracle webcenter sites generic 12.2.1.3.0
nvd oracle weblogic server generic 10.3.6.0.0 · 12.1.3.0.0 · 12.2.1.3.0 · 12.2.1.4.0 · 14.1.1.0.0
nvd redhat cloudforms generic 4.7
nvd redhat virtualization manager generic 4.3

Earlier manual review

A reviewer classified this CVE in an older dataset. We kept the labels and products below, but not the reviewer's reasoning.

## Manual Classification Context **Labels:** SOFTWARE (JQUERY), MOBILE APPLICATION PLATFORM (JQUERY), UIF OPEN UI (JQUERY), ONE COMMAND INSTALLATION TOOL (JQUERY), ANSWER FLOW (JQUERY), STUDIO (JQUERY), MAPS (JQUERY), CHARTING (JQUERY), NEXT GEN MOBILE APPLICATION (JQUERY), FRAMEWORK ADMINISTRATOR IBFA (JQUERY), WSC-CONSOLE (JQUERY), GENERAL (JQUERY), HTTP, BI PUBLISHER SECURITY (JQUERY), BILLING CARE, INSTALL (JQUERY), CONSOLE (JQUERY), ADF FACES (JQUERY), CORE (JQUERY), DETERMINATIONS ENGINE (JQUERY), CALLS PAGE (JQUERY), ORACLE FLOW BUILDER (JQUERY), BUSINESS OPERATIONS CENTER (JQUERY), WEB CONTAINER (JQUERY), COHORT EXPLORER (JQUERY), SERVICE LEVEL AGREEMENTS (JQUERY), LOAD TESTING FOR WEB APPS (JQUERY), LIBRARIES (JQUERY), RETAIL SCIENCE ENGINE (JQUERY), UI PLATFORM (JQUERY), NO AUTH REMOTE EXPLOIT, MOBILE POS (JQUERY), SECURITY (JQUERY), IDIH VISUALIZATION (JQUERY), SAMPLE APPS (JQUERY), WEB RUNTIME SEC (JQUERY), BASE (JQUERY), MEDIATION ENGINE, INFRASTRUCTURE (JQUERY), EXPENSES (JQUERY), SUPPLIER PORTAL (JQUERY), CG MOBILE CONNECTED (JQUERY), MULTIPLE, NETWORKING (JQUERY), RUNTIME ENGINE (JQUERY), ADVANCED UI (JQUERY), UI (JQUERY), PORTAL, INSTALLATION (JQUERY), USER INTERFACE (JQUERY), HYPERION PLANNING (JQUERY) **Products:** PRIMAVERA UNIFIER, ORACLE ENTERPRISE MANAGER, ORACLE SUPPORT TOOLS, ORACLE FINANCIAL SERVICES - REGULATORY REPORTING FOR RESERVE BANK OF INDIA - LOMBARD RISK INTEGRATION PACK, ORACLE RETAIL POINT-OF-SERVICE, ORACLE SERVICE BUS, ORACLE FINANCIAL SERVICES DATA INTEGRATION HUB, ORACLE POLICY AUTOMATION FOR MOBILE DEVICES, ORACLE FINANCIAL SERVICES ANALYTICAL APPLICATIONS RECONCILIATION FRAMEWORK, SIEBEL UI FRAMEWORK, ORACLE FINANCIAL SERVICES APPLICATIONS, ORACLE FINANCIAL SERVICES REGULATORY REPORTING FOR EUROPEAN BANKING AUTHORITY, ENTERPRISE MANAGER OPS CENTER, ORACLE FINANCIAL SERVICES ANALYTICAL APPLICATIONS INFRASTRUCTURE, TAPE LIBRARY ACSLS, STORAGETEK TAPE ANALYTICS SW TOOL, ORACLE CONSTRUCTION AND ENGINEERING, ORACLE JD EDWARDS, ORACLE WEBCENTER SITES, ORACLE INSURANCE APPLICATIONS, ORACLE FINANCIAL SERVICES RETAIL CUSTOMER ANALYTICS, ORACLE AGILE PRODUCT LIFECYCLE MANAGEMENT FOR PROCESS, ORACLE FINANCIAL SERVICES DATA FOUNDATION, ORACLE COMMUNICATIONS INTERACTIVE SESSION RECORDER, ORACLE FINANCIAL SERVICES REGULATORY REPORTING FOR EUROPEAN BANKING AUTHORITY - INTEGRATION PACK FOR LOMBARD RISK, SIEBEL MOBILE APPLICATIONS, ORACLE FINANCIAL SERVICES LOAN LOSS FORECASTING AND PROVISIONING, ORACLE SIEBEL CRM, ORACLE REAL-TIME SCHEDULER, ORACLE FUSION MIDDLEWARE, APPLICATION SERVICE LEVEL MANAGEMENT, ORACLE COMMUNICATIONS BILLING AND REVENUE MANAGEMENT, ORACLE INSURANCE IFRS 17 ANALYZER, ORACLE BIG DATA DISCOVERY, ORACLE FINANCIAL SERVICES MARKET RISK MEASUREMENT AND MANAGEMENT, IDENTITY MANAGER, ORACLE INSURANCE INSBRIDGE RATING AND UNDERWRITING, BI PUBLISHER, ORACLE INSURANCE DATA FOUNDATION, ORACLE RETAIL CUSTOMER INSIGHTS, ORACLE FUSION MIDDLEWARE MAPVIEWER, ORACLE INSURANCE PERFORMANCE INSIGHT, ORACLE COMMUNICATIONS APPLICATIONS, ORACLE UTILITIES APPLICATIONS, ORACLE HEALTH SCIENCES APPLICATIONS, ORACLE FINANCIAL SERVICES PROFITABILITY MANAGEMENT, ORACLE BANKING PLATFORM, ORACLE COMMUNICATIONS WEBRTC SESSION CONTROLLER, ORACLE INSURANCE ACCOUNTING ANALYZER, ORACLE FINANCIAL SERVICES PRICE CREATION AND DISCOVERY, ORACLE HOSPITALITY GUEST ACCESS, PEOPLESOFT ENTERPRISE FIN EXPENSES, ORACLE PEOPLESOFT, ORACLE RETAIL APPLICATIONS, ORACLE APPLICATION TESTING SUITE, ORACLE FINANCIAL SERVICES ASSET LIABILITY MANAGEMENT, ORACLE HOSPITALITY MATERIALS CONTROL, ORACLE FINANCIAL SERVICES FUNDS TRANSFER PRICING, DIAGNOSTIC ASSISTANT, ORACLE SUPPLY CHAIN, ORACLE HEALTHCARE TRANSLATIONAL RESEARCH, ORACLE FINANCIAL SERVICES BASEL REGULATORY CAPITAL INTERNAL RATINGS BASED APPROACH, ORACLE FINANCIAL SERVICES HEDGE MANAGEMENT AND IFRS VALUATIONS, SYSTEM UTILITIES, ORACLE FOOD AND BEVERAGE APPLICATIONS, ORACLE WEBLOGIC SERVER, ORACLE HEALTHCARE FOUNDATION, ORACLE POLICY AUTOMATION CONNECTOR FOR SIEBEL, ORACLE COMMUNICATIONS DIAMETER SIGNALING ROUTER (DSR), ORACLE FINANCIAL SERVICES LIQUIDITY RISK MANAGEMENT, PRIMAVERA GATEWAY, ORACLE KNOWLEDGE, ORACLE BUSINESS PROCESS MANAGEMENT SUITE, ORACLE FINANCIAL SERVICES - REGULATORY REPORTING FOR US FEDERAL RESERVE - LOMBARD RISK INTEGRATION PACK, ORACLE HOSPITALITY APPLICATIONS, ORACLE COMMUNICATIONS OPERATIONS MONITOR, ORACLE FINANCIAL SERVICES REGULATORY REPORTING FOR US FEDERAL RESERVE, ORACLE FINANCIAL SERVICES REVENUE MANAGEMENT AND BILLING, ORACLE FINANCIAL SERVICES LIQUIDITY RISK MEASUREMENT AND MANAGEMENT, ORACLE POLICY AUTOMATION, ORACLE SYSTEMS, ORACLE UTILITIES MOBILE WORKFORCE MANAGEMENT, ORACLE FINANCIAL SERVICES RETAIL PERFORMANCE ANALYTICS, ORACLE INSURANCE ALLOCATION MANAGER FOR ENTERPRISE PROFITABILITY, JQUERY, ORACLE COMMUNICATIONS UNIFIED INVENTORY MANAGEMENT, ORACLE PEOPLESOFT PRODUCTS, ORACLE FINANCIAL SERVICES INSTITUTIONAL PERFORMANCE ANALYTICS, ORACLE JDEVELOPER AND ADF, PEOPLESOFT ENTERPRISE PEOPLETOOLS, ORACLE FINANCIAL SERVICES BASEL REGULATORY CAPITAL BASIC, JD EDWARDS ENTERPRISEONE TOOLS, ORACLE TRANSPORTATION MANAGEMENT, ORACLE FINANCIAL SERVICES ENTERPRISE FINANCIAL PERFORMANCE ANALYTICS, HYPERION PLANNING, ORACLE HYPERION

References

URLTags
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html Mailing List, Third Party Advisory
http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2019/May/10 Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2019/May/11 Mailing List, Patch, Third Party Advisory
http://seclists.org/fulldisclosure/2019/May/13 Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/06/03/2 Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/108023 Broken Link, Third Party Advisory, VDB Entry

Timeline
Published2019-04-20By the CVE Program.
VulnCheck KEV: earliest evidence2021-01-21Date of the oldest evidence of exploitation in VulnCheck KEV's record. VulnCheck does not publish the date it listed the CVE.
VulnCheck KEV: latest evidence2024-10-22Date of the newest report, exploit reference or honeypot sighting in VulnCheck KEV's record.
NVD record modified2026-06-17NVD's own last-modified date for this record.