| Package | Affected versions | Patched versions |
|---|---|---|
| org.quartz-scheduler:quartz | < 2.3.2 | 2.3.2 |
| tomee | = 7.1.3 | |
| jira service management | = 4.20.0= 4.20.1= 4.20.10= 4.20.11= 4.20.12= 4.20.13= 4.20.14= 4.20.15= 4.20.16= 4.20.17= 4.20.18= 4.20.19= 4.20.2= 4.20.20= 4.20.21= 4.20.22= 4.20.23= 4.20.24= 4.20.25= 4.20.3= 4.20.4= 4.20.5= 4.20.6= 4.20.7= 4.20.8= 4.20.9= 4.21.0= 4.21.1= 4.22.0= 4.22.1= 4.22.2= 4.22.3= 4.22.4= 4.22.6= 5.0.0= 5.1.0= 5.1.1= 5.10.0= 5.2.0= 5.2.1= 5.3.0= 5.3.1= 5.3.2= 5.3.3= 5.4.0= 5.4.1= 5.4.2= 5.4.3= 5.4.4= 5.4.5= 5.4.6= 5.4.7= 5.4.8= 5.4.9= 5.5.1= 5.6.0= 5.7.0= 5.7.1= 5.8.0= 5.8.1= 5.9.0 | |
| apache batik mapviewer | = 12.2.0.1= 18c= 19c | |
| banking enterprise originations | = 2.7.0= 2.8.0 | |
| banking enterprise product manufacturing | = 2.7.0= 2.8.0 | |
| banking payments | ≥ 14.1.0, ≤ 14.4.0 | |
| communications ip service activator | = 7.3.0= 7.4.0 | |
| communications session route manager | ≥ 8.2.0, ≤ 8.2.2 | |
| customer management and segmentation foundation | = 18.0 | |
| documaker | ≥ 12.6.0, ≤ 12.6.4 | |
| enterprise manager base platform | = 13.2.1.0 | |
| enterprise manager ops center | = 12.4.0.0 | |
| flexcube investor servicing | = 12.1.0= 12.3.0= 12.4.0= 14.1.0= 14.4.0 | |
| flexcube private banking | = 12.0.0= 12.1.0 | |
| fusion middleware mapviewer | = 12.2.1.3.0 | |
| google guava mapviewer | = 12.2.0.1= 18c= 19c | |
| hyperion infrastructure technology | = 11.1.2.4 | |
| jd edwards enterpriseone orchestrator | ≤ 9.2.5.3 | |
| primavera unifier | = 16.1= 16.2= 18.8≥ 17.7, ≤ 17.12 | |
| retail back office | = 14.1 | |
| retail central office | = 14.1 | |
| retail integration bus | = 15.0= 16.0 | |
| retail order broker | = 15.0= 16.0= 18.0= 19.0 | |
| retail point-of-service | = 14.1 | |
| retail returns management | = 14.1 | |
| retail xstore point of service | = 15.0= 16.0= 17.0= 18.0= 19.0 | |
| terracotta quartz scheduler mapviewer | = 12.2.0.1= 18c= 19c | |
| webcenter sites | = 12.2.1.3.0= 12.2.1.4.0 | |
| quartz | < 2.3.2 | 2.3.2 |
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free