A vulnerability, which was classified as very critical, has been found in Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.5.3. This issue affects some unknown processing of the component Quartz. The manipulation leads to xml external entity reference.
The identification of this vulnerability is CVE-2019-13990. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2019-13990 | Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.5.3 Quartz xml external entity reference
A vulnerability, which was classified as very critical, has been found in Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.5.3. This issue affects some unknown processing of the component Quartz. The manipulation leads to xml…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR