A vulnerability, which was classified as very critical, was found in Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.5.3. Affected by this vulnerability is an unknown functionality of the component Quartz. Executing a manipulation can lead to xml external entity reference.
This vulnerability is handled as CVE-2019-13990. The attack can be executed remotely. There is not any exploit available.
You should upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2019-13990 | Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.5.3 Quartz xml external entity reference (Nessus ID 210560 / WID-SEC-2026-1608)
A vulnerability, which was classified as very critical, was found in Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.5.3. Affected by this vulnerability is an unknown functionality of the component Quartz. Executing a manipulation…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR