CVE-2019-10219: hibernate validator before 6.0.18 (exclusive), 6.1.0 · update alpha1, 6.1.0 · update alpha2 (+4 more affected…

Affected technology

hibernate validator · before 6.0.18 (exclusive)
redhat

hibernate validator · 6.1.0 · update alpha1
redhat

hibernate validator · 6.1.0 · update alpha2
redhat

hibernate validator · 6.1.0 · update alpha3
redhat

hibernate validator · 6.1.0 · update alpha4
redhat

hibernate validator · 6.1.0 · update alpha5
redhat

hibernate validator · 6.1.0 · update alpha6
redhat

fuse · 1.0
redhat

jboss data grid · Version not applicable in the source CPE
redhat

jboss enterprise application platform · Version not applicable in the source CPE
redhat

openshift application runtimes · Version not applicable in the source CPE
redhat

single sign-on · Version not applicable in the source CPE
redhat

jboss enterprise application platform · 7.2
redhat

jboss enterprise application platform · 7.3
redhat

active iq unified manager · Version not applicable in the source CPE
netapp

management services for element software and netapp hci · Version not applicable in the source CPE
netapp

snapcenter plug-in · Version not applicable in the source CPE
netapp

element · Version not applicable in the source CPE
netapp

access manager · 11.1.2.3.0
oracle

access manager · 12.2.1.3.0
oracle

access manager · 12.2.1.4.0
oracle

agile engineering data management · 6.2.1.0
oracle

agile product lifecycle analytics · 3.6.1
oracle

agile product lifecycle management · 9.3.3
oracle

agile product lifecycle management · 9.3.6
oracle

agile product lifecycle management integration pack · 3.6
oracle

airlines data model · 12.1.1.0.0
oracle

airlines data model · 12.2.0.1.0
oracle

application express · 21.1.4
oracle

application performance management · 13.4.1.0
oracle

application performance management · 13.5.1.0
oracle

application testing suite · 13.3.0.1
oracle

argus analytics · 8.2.1
oracle

argus analytics · 8.2.2
oracle

argus analytics · 8.2.3
oracle

argus analytics · 8.21
oracle

argus insight · 8.2.1
oracle

argus insight · 8.2.2
oracle

argus insight · 8.2.3
oracle

argus safety · 8.2.1
oracle

argus safety · 8.2.2
oracle

argus safety · 8.2.3
oracle

banking apis · 18.1
oracle

banking apis · 18.2
oracle

banking apis · 18.3
oracle

banking apis · 19.1
oracle

banking apis · 19.2
oracle

banking apis · 20.1
oracle

banking apis · 21.1
oracle

banking deposits and lines of credit servicing · 2.12.0
oracle

banking digital experience · 17.2
oracle

banking digital experience · 18.1
oracle

banking digital experience · 18.3
oracle

banking digital experience · 19.1
oracle

banking digital experience · 19.2
oracle

banking digital experience · 20.1
oracle

banking digital experience · 21.1
oracle

banking enterprise default management · 2.6.2
oracle

banking enterprise default management · 2.7.0
oracle

banking enterprise default management · 2.7.1
oracle

banking enterprise default management · 2.10.0
oracle

banking enterprise default management · 2.12.0
oracle

banking enterprise default managment · from 2.3.0 (inclusive), through 2.4.0 (inclusive)
oracle

banking loans servicing · 2.12.0
oracle

banking party management · 2.7.0
oracle

banking platform · from 2.3.0 (inclusive), through 2.4.1 (inclusive)
oracle

banking platform · 2.6.2
oracle

banking platform · 2.7.0
oracle

banking platform · 2.7.1
oracle

bi publisher · 5.5.0.0.0
oracle

bi publisher · 11.1.1.9.0
oracle

bi publisher · 12.2.1.3.0
oracle

bi publisher · 12.2.1.4.0
oracle

big data spatial and graph · 23.1
oracle

business activity monitoring · 12.2.1.4.0
oracle

business intelligence · 5.5.0.0.0
oracle

business intelligence · 5.9.0.0.0
oracle

business intelligence · 12.2.1.3.0
oracle

business intelligence · 12.2.1.4.0
oracle

business process management suite · 12.2.1.3.0
oracle

business process management suite · 12.2.1.4.0
oracle

clinical · 5.2.1
oracle

clinical · 5.2.2
oracle

commerce guided search · 11.3.2
oracle

commerce platform · from 11.3.0 (inclusive), through 11.3.2 (inclusive)
oracle

communications application session controller · 3.9.0
oracle

communications billing and revenue management · 12.0.0.3
oracle

communications billing and revenue management · 12.0.0.4
oracle

communications billing and revenue management elastic charging engine · 11.3
oracle

communications billing and revenue management elastic charging engine · 12.0
oracle

communications calendar server · 8.0.0.5.0
oracle

communications calendar server · 8.0.0.6.0
oracle

communications cloud native core automated test suite · 1.8.0
oracle

communications cloud native core binding support function · 1.9.0
oracle

communications cloud native core binding support function · 1.10.0
oracle

communications cloud native core console · 1.7.0
oracle

communications cloud native core network function cloud native environment · 1.9.0
oracle

communications cloud native core network repository function · 1.14.0
oracle

communications cloud native core policy · 1.14.0
oracle

communications cloud native core security edge protection proxy · 1.5.0
oracle

communications cloud native core security edge protection proxy · 1.6.0
oracle

communications cloud native core security edge protection proxy · 1.15.0
oracle

communications cloud native core service communication proxy · 1.14.0
oracle

communications cloud native core unified data repository · 1.14.0
oracle

communications contacts server · 8.0.0.3.0
oracle

communications converged application server - service controller · 6.2
oracle

communications convergence · 3.0.2.2.0
oracle

communications convergent charging controller · from 12.0.1.0.0 (inclusive), through 12.0.4.0.0 (inclusive)
oracle

communications convergent charging controller · 6.0.1.0.0
oracle

communications data model · 11.3.2.1.0
oracle

communications data model · 11.3.2.2.0
oracle

communications data model · 11.3.2.3.0
oracle

communications data model · 12.1.0.1.0
oracle

communications data model · 12.1.2.0.0
oracle

communications design studio · 7.3.4
oracle

communications design studio · 7.3.5
oracle

communications design studio · 7.4.0
oracle

communications design studio · 7.4.1
oracle

communications design studio · 7.4.2
oracle

communications diameter signaling route · from 8.0.0.0 (inclusive), through 8.5.1.0 (inclusive)
oracle

communications eagle application processor · from 16.1 (inclusive), through 16.4 (inclusive)
oracle

communications instant messaging server · 10.0.1.5.0
oracle

communications interactive session recorder · 6.3
oracle

communications interactive session recorder · 6.4
oracle

communications messaging server · 8.1
oracle

communications metasolv solution · 6.3.1
oracle

communications network charging and control · from 12.0.1.0.0 (inclusive), through 12.0.4.0.0 (inclusive)
oracle

communications network charging and control · 6.0.1.0.0
oracle

communications network integrity · 7.3.5
oracle

communications network integrity · 7.3.6
oracle

communications offline mediation controller · 12.0.0.3
oracle

communications operations monitor · 3.4
oracle

communications operations monitor · 4.2
oracle

communications operations monitor · 4.3
oracle

communications operations monitor · 4.4
oracle

communications operations monitor · 5.0
oracle

communications pricing design center · 12.0.0.3.0
oracle

communications pricing design center · 12.0.0.4.0
oracle

communications service broker · 6.2
oracle

communications services gatekeeper · 7.0
oracle

communications session border controller · 8.2
oracle

communications session border controller · 8.3
oracle

communications session border controller · 8.4
oracle

communications session border controller · 9.0
oracle

communications unified inventory management · 7.3.0
oracle

communications unified inventory management · 7.3.4
oracle

communications unified inventory management · 7.3.5
oracle

communications unified inventory management · 7.4.0
oracle

communications unified inventory management · 7.4.1
oracle

communications unified inventory management · 7.4.2
oracle

communications unified inventory management · 7.5.0
oracle

communications webrtc session controller · 7.2.0
oracle

communications webrtc session controller · 7.2.1
oracle

data integrator · 12.2.1.3.0
oracle

data integrator · 12.2.1.4.0
oracle

database server · 12.1.0.1
oracle

database server · 12.1.0.2
oracle

database server · 19c
oracle

database server · 21c
oracle

demantra demand management · from 12.2.6 (inclusive), through 12.2.11 (inclusive)
oracle

documaker · from 12.6.0 (inclusive), through 12.6.4 (inclusive)
oracle

e-business suite · from 12.2.3 (inclusive), through 12.2.11 (inclusive)
oracle

enterprise communications broker · 3.3
oracle

enterprise data quality · 12.2.1.3.0
oracle

enterprise data quality · 12.2.1.4.0
oracle

enterprise manager base platform · 13.4.0.0
oracle

enterprise manager base platform · 13.5.0.0
oracle

enterprise manager ops center · 12.4.0.0
oracle

enterprise session border controller · 8.4
oracle

enterprise session border controller · 9.0
oracle

essbase · before 11.1.2.4.47 (exclusive)
oracle

essbase · from 21.0 (inclusive), before 21.3 (exclusive)
oracle

essbase · 11.1.2.4.47
oracle

essbase administration services · before 11.1.2.4.47 (exclusive)
oracle

essbase administration services · 11.1.2.4.47
oracle

financial services analytical applications infrastructure · from 8.0.7 (inclusive), through 8.1.1 (inclusive)
oracle

financial services analytical applications infrastructure · 7.3.3
oracle

financial services behavior detection platform · 8.0.7
oracle

financial services behavior detection platform · 8.0.8
oracle

financial services behavior detection platform · 8.0.11
oracle

financial services enterprise case management · 8.0.7
oracle

financial services enterprise case management · 8.0.8
oracle

financial services enterprise case management · 8.0.11
oracle

financial services foreign account tax compliance act management · 8.0.7
oracle

financial services foreign account tax compliance act management · 8.0.8
oracle

financial services foreign account tax compliance act management · 8.0.11
oracle

financial services model management and governance · from 8.0.8 (inclusive), through 8.1.1 (inclusive)
oracle

financial services trade-based anti money laundering · 8.0.7
oracle

financial services trade-based anti money laundering · 8.0.8
oracle

flexcube investor servicing · 12.0.4
oracle

flexcube investor servicing · 12.1.0
oracle

flexcube investor servicing · 12.3.0
oracle

flexcube investor servicing · 12.4.0
oracle

flexcube investor servicing · 14.4.0
oracle

flexcube investor servicing · 14.5.0
oracle

flexcube private banking · 12.0.0
oracle

flexcube private banking · 12.1.0
oracle

fusion middleware · 12.2.1.3.0
oracle

fusion middleware · 12.2.1.4.0
oracle

fusion middleware mapviewer · 12.2.1.4.0
oracle

goldengate · before 12.3.0.1 (exclusive)
oracle

goldengate · from 19.0.0 (inclusive), before 19.1.0.0.220118 (exclusive)
oracle

goldengate · from 21.0.0 (inclusive), before 21.5.0.0.220118 (exclusive)
oracle

goldengate application adapters · 19.1.0.0.0
oracle

graalvm · 20.3.4
oracle

graalvm · 21.3.0
oracle

graph server and client · before 21.4 (exclusive)
oracle

health sciences clinical development analytics · 4.0.1
oracle

health sciences inform crf submit · 6.2.1
oracle

health sciences information manager · 3.0.2
oracle

health sciences information manager · 3.0.3
oracle

healthcare data repository · 7.0.2
oracle

healthcare data repository · 8.1.0
oracle

healthcare data repository · 8.1.1
oracle

healthcare foundation · from 7.3.0.0 (inclusive), through 7.3.0.2 (inclusive)
oracle

healthcare foundation · from 8.0.0 (inclusive), through 8.0.2 (inclusive)
oracle

healthcare foundation · 8.1.0
oracle

healthcare foundation · 8.1.1
oracle

healthcare translational research · 4.1.0
oracle

hospitality cruise shipboard property management system · 20.1.0
oracle

hospitality opera 5 property services · 5.6
oracle

hospitality reporting and analytics · 9.1.0
oracle

hospitality suite8 · 8.10.2
oracle

hospitality suite8 · 8.11.0
oracle

hospitality suite8 · 8.12.0
oracle

hospitality suite8 · 8.13.0
oracle

hospitality suite8 · 8.14.0
oracle

http server · 12.2.1.3.0
oracle

http server · 12.2.1.4.0
oracle

hyperion financial management · 11.1.2.4
oracle

hyperion financial management · 11.2.6.0
oracle

hyperion ilearning · 6.2
oracle

hyperion ilearning · 6.3
oracle

hyperion infrastructure technology · 11.2.7.0
oracle

instantis enterprisetrack · 17.1
oracle

instantis enterprisetrack · 17.2
oracle

instantis enterprisetrack · 17.3
oracle

insurance data gateway · 11.0.2
oracle

insurance data gateway · 11.1.0
oracle

insurance data gateway · 11.2.7
oracle

insurance data gateway · 11.3.0
oracle

insurance data gateway · 11.3.1
oracle

insurance insbridge rating and underwriting · from 5.4.0 (inclusive), through 5.6.0 (inclusive)
oracle

insurance insbridge rating and underwriting · 5.2.0
oracle

insurance policy administration · 11.0.2
oracle

insurance policy administration · 11.1.0
oracle

insurance policy administration · 11.2.7
oracle

insurance policy administration · 11.3.0
oracle

insurance policy administration · 11.3.1
oracle

insurance policy administration j2ee · from 11.1.0 (inclusive), through 11.3.0 (inclusive)
oracle

insurance policy administration j2ee · 10.2.0
oracle

insurance policy administration j2ee · 10.2.4
oracle

insurance policy administration j2ee · 11.0.2
oracle

insurance rules palette · from 11.1.0 (inclusive), through 11.3.0 (inclusive)
oracle

insurance rules palette · 10.2.0
oracle

insurance rules palette · 10.2.4
oracle

insurance rules palette · 11.0.2
oracle

insurance rules palette · 11.3.1
oracle

java se · 7u321
oracle

java se · 8u311
oracle

java se · 17.1
oracle

jd edwards enterpriseone orchestrator · before 9.2.6.1 (exclusive)
oracle

jdk · 11.0.13
oracle

managed file transfer · 12.2.1.3.0
oracle

managed file transfer · 12.2.1.4.0
oracle

mysql cluster · before 7.4.34 (exclusive)
oracle

mysql cluster · from 7.5.0 (inclusive), before 7.5.24 (exclusive)
oracle

mysql cluster · from 7.6.0 (inclusive), before 7.6.20 (exclusive)
oracle

mysql cluster · from 8.0.0 (inclusive), before 8.0.27 (exclusive)
oracle

mysql connectors · before 8.0.27 (exclusive)
oracle

mysql connectors · 8.0.27
oracle

mysql server · before 5.7.36 (exclusive)
oracle

mysql server · from 8.0.0 (inclusive), before 8.0.27 (exclusive)
oracle

mysql server · 5.7.36
oracle

mysql workbench · before 8.0.27 (exclusive)
oracle

nosql database · before 21.1.12 (exclusive)
oracle

oss support tools · before 2.12.42 (exclusive)
oracle

peoplesoft enterprise cs sa integration pack · 9.0
oracle

peoplesoft enterprise cs sa integration pack · 9.2
oracle

peoplesoft enterprise peopletools · 8.57
oracle

peoplesoft enterprise peopletools · 8.58
oracle

peoplesoft enterprise peopletools · 8.59
oracle

policy automation · from 12.2.0 (inclusive), through 12.2.24 (inclusive)
oracle

policy automation · 10.4.7
oracle

primavera analytics · 18.8.3.3
oracle

primavera analytics · 19.12.11.1
oracle

primavera analytics · 20.12.12.0
oracle

primavera data warehouse · 18.8.3.3
oracle

primavera data warehouse · 19.12.11.1
oracle

primavera data warehouse · 20.12.12.0
oracle

primavera gateway · from 17.12.0 (inclusive), through 17.12.11 (inclusive)
oracle

primavera gateway · from 18.8.0 (inclusive), through 18.8.13 (inclusive)
oracle

primavera gateway · from 19.12.0 (inclusive), through 19.12.12 (inclusive)
oracle

primavera gateway · from 20.12.0 (inclusive), through 20.12.7 (inclusive)
oracle

primavera gateway · 21.12.0
oracle

primavera p6 enterprise project portfolio management · from 17.12.0.0 (inclusive), through 17.12.0.0-17.12.20.0 (inclusive)
oracle

primavera p6 enterprise project portfolio management · from 18.8.0.0 (inclusive), through 18.8.24.0 (inclusive)
oracle

primavera p6 enterprise project portfolio management · from 19.12.0.0 (inclusive), through 19.12.18.0 (inclusive)
oracle

primavera p6 enterprise project portfolio management · from 20.12.0.0 (inclusive), through 20.12.12.0 (inclusive)
oracle

primavera p6 enterprise project portfolio management · 21.12.0.0
oracle

primavera p6 professional project management · from 17.12.0.0 (inclusive), through 17.12.20.0 (inclusive)
oracle

primavera p6 professional project management · from 18.8.0.0 (inclusive), through 18.8.24.0 (inclusive)
oracle

primavera p6 professional project management · from 19.12.0.0 (inclusive), through 19.12.17.0 (inclusive)
oracle

primavera p6 professional project management · from 20.12.0.0 (inclusive), through 20.12.9.0 (inclusive)
oracle

primavera portfolio management · from 18.0.0.0 (inclusive), through 18.0.3.0 (inclusive)
oracle

primavera portfolio management · from 19.0.0.0 (inclusive), through 19.0.1.2 (inclusive)
oracle

primavera portfolio management · 20.0.0.0
oracle

primavera portfolio management · 20.0.0.1
oracle

primavera unifier · from 17.7 (inclusive), through 17.12 (inclusive)
oracle

primavera unifier · 18.8
oracle

primavera unifier · 19.12
oracle

primavera unifier · 20.12
oracle

primavera unifier · 21.12
oracle

rapid planning · from 12.2.6 (inclusive), through 12.2.11 (inclusive)
oracle

real-time decision server · 3.2.0.0
oracle

real user experience insight · 13.4.1.0
oracle

real user experience insight · 13.5.1.0
oracle

rest data services · 21.2.4
oracle

retail allocation · 14.1.3.2
oracle

retail allocation · 15.0.3.1
oracle

retail allocation · 16.0.3
oracle

retail allocation · 19.0.1
oracle

retail analytics · from 16.0.0 (inclusive), through 16.0.2 (inclusive)
oracle

retail assortment planning · 16.0.3
oracle

retail back office · 14.1
oracle

retail central office · 14.1
oracle

retail customer insights · from 16.0.0 (inclusive), through 16.0.2 (inclusive)
oracle

retail customer management and segmentation foundation · from 16.0 (inclusive), through 19.0 (inclusive)
oracle

retail eftlink · 16.0.3
oracle

retail eftlink · 17.0.2
oracle

retail eftlink · 18.0.1
oracle

retail eftlink · 19.0.1
oracle

retail eftlink · 20.0.1
oracle

retail extract transform and load · 13.2.8
oracle

retail financial integration · 14.1.3.2
oracle

retail financial integration · 15.0.3.1
oracle

retail financial integration · 16.0.3
oracle

retail financial integration · 19.0.1
oracle

retail fiscal management · 14.2
oracle

retail integration bus · from 16.0.1 (inclusive), through 16.0.3 (inclusive)
oracle

retail integration bus · 13.0
oracle

retail integration bus · 14.1.3.0
oracle

retail integration bus · 14.1.3.2
oracle

retail integration bus · 15.0.3.1
oracle

retail integration bus · 19.0.0
oracle

retail integration bus · 19.0.1
oracle

retail invoice matching · 15.0.3
oracle

retail invoice matching · 16.0.3
oracle

retail merchandising system · 19.0.1
oracle

retail order broker · 16.0
oracle

retail order broker · 18.0
oracle

retail order broker · 19.1
oracle

retail order management system · 19.5
oracle

retail point-of-sale · 14.1
oracle

retail predictive application server · 14.1.3
oracle

retail predictive application server · 14.1.3.46
oracle

retail predictive application server · 15.0.3
oracle

retail predictive application server · 15.0.3.115
oracle

retail predictive application server · 16.0.3
oracle

retail predictive application server · 16.0.3.240
oracle

retail price management · 13.2
oracle

retail price management · 14.0.4
oracle

retail price management · 14.1
oracle

retail price management · 14.1.3
oracle

retail price management · 15.0
oracle

retail price management · 15.0.3
oracle

retail price management · 16.0
oracle

retail price management · 16.0.3
oracle

retail returns management · 14.1
oracle

retail service backbone · from 16.0.1 (inclusive), through 16.0.3 (inclusive)
oracle

retail service backbone · 14.1.3.0
oracle

retail service backbone · 14.1.3.2
oracle

retail service backbone · 15.0.3.1
oracle

retail service backbone · 19.0.0
oracle

retail service backbone · 19.0.1
oracle

retail size profile optimization · 16.0.3
oracle

retail xstore point of service · 17.0.4
oracle

retail xstore point of service · 18.0.3
oracle

retail xstore point of service · 19.0.2
oracle

retail xstore point of service · 20.0.1
oracle

sd-wan aware · 8.2
oracle

sd-wan edge · 9.0
oracle

sd-wan edge · 9.1
oracle

secure backup · 18.1.0.1.0
oracle

siebel applications · before 21.12 (exclusive)
oracle

spatial studio · 21.2.1
oracle

thesaurus management system · 5.2.3
oracle

thesaurus management system · 5.3.0
oracle

thesaurus management system · 5.3.1
oracle

timesten in-memory database · before 11.2.2.8.27 (exclusive)
oracle

timesten in-memory database · from 21.0.0 (inclusive), before 21.1.1.1.0 (exclusive)
oracle

utilities framework · from 4.3.0.1.0 (inclusive), through 4.3.0.6.0 (inclusive)
oracle

utilities framework · 4.2.0.2.0
oracle

utilities framework · 4.2.0.3.0
oracle

utilities framework · 4.4.0.0.0
oracle

utilities framework · 4.4.0.2.0
oracle

utilities framework · 4.4.0.3.0
oracle

utilities testing accelerator · 6.0.0.1.1
oracle

utilities testing accelerator · 6.0.0.2.2
oracle

utilities testing accelerator · 6.0.0.3.1
oracle

vm virtualbox · before 6.1.32 (exclusive)
oracle

webcenter portal · 12.2.1.3.0
oracle

webcenter portal · 12.2.1.4.0
oracle

weblogic server · 12.1.3.0.0
oracle

weblogic server · 12.2.1.3.0
oracle

weblogic server · 12.2.1.4.0
oracle

weblogic server · 14.1.1.0.0
oracle

zfs storage appliance kit · 8.8
oracle

zfs storage application integration engineering software · 1.3.3
oracle

solaris · 10
oracle

solaris · 11
oracle

fujitsu m10-1 firmware · Version not applicable in the source CPE
oracle

fujitsu m10-4 firmware · Version not applicable in the source CPE
oracle

fujitsu m10-4s firmware · Version not applicable in the source CPE
oracle

fujitsu m12-1 firmware · Version not applicable in the source CPE
oracle

fujitsu m12-2 firmware · Version not applicable in the source CPE
oracle

fujitsu m12-2s firmware · Version not applicable in the source CPE
oracle

hibernate-validator · 6.0.0.Alpha1 through 6.0.17.Final, 6.1.0.Alpha1 through 6.1.0.Alpha6
Hibernate

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 6.1/10) rates confidentiality and integrity impact as low; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.