6.1
CVSSv3

CVE-2019-10219

CVSSv4: NA | CVSSv3: 6.1 | CVSSv2: 4.3 | VMScore: 710 | EPSS: 0.00161 | KEV: Not Included
Published: 08/11/2019 Updated: 21/11/2024

Vulnerability Summary

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

redhat hibernate validator

redhat hibernate validator 6.1.0

redhat fuse 1.0

redhat jboss data grid -

redhat jboss enterprise application platform -

redhat openshift application runtimes -

redhat single sign-on -

redhat jboss enterprise application platform 7.2

redhat jboss enterprise application platform 7.3

netapp active iq unified manager -

netapp management services for element software and netapp hci -

netapp snapcenter plug-in -

netapp element -

oracle access manager 11.1.2.3.0

oracle access manager 12.2.1.3.0

oracle access manager 12.2.1.4.0

oracle agile engineering data management 6.2.1.0

oracle agile plm 9.3.3

oracle agile plm 9.3.6

oracle agile product lifecycle analytics 3.6.1

oracle agile product lifecycle management integration pack 3.6

oracle airlines data model 12.1.1.0.0

oracle airlines data model 12.2.0.1.0

oracle application express 21.1.4

oracle application performance management 13.4.1.0

oracle application performance management 13.5.1.0

oracle application testing suite 13.3.0.1

oracle argus analytics 8.2.1

oracle argus analytics 8.2.2

oracle argus analytics 8.2.3

oracle argus analytics 8.21

oracle argus insight 8.2.1

oracle argus insight 8.2.2

oracle argus insight 8.2.3

oracle argus safety 8.2.1

oracle argus safety 8.2.2

oracle argus safety 8.2.3

oracle banking apis 18.1

oracle banking apis 18.2

oracle banking apis 18.3

oracle banking apis 19.1

oracle banking apis 19.2

oracle banking apis 20.1

oracle banking apis 21.1

oracle banking deposits and lines of credit servicing 2.12.0

oracle banking digital experience 17.2

oracle banking digital experience 18.1

oracle banking digital experience 18.3

oracle banking digital experience 19.1

oracle banking digital experience 19.2

oracle banking digital experience 20.1

oracle banking digital experience 21.1

oracle banking enterprise default management 2.6.2

oracle banking enterprise default management 2.7.0

oracle banking enterprise default management 2.7.1

oracle banking enterprise default management 2.10.0

oracle banking enterprise default management 2.12.0

oracle banking enterprise default managment

oracle banking loans servicing 2.12.0

oracle banking party management 2.7.0

oracle banking platform

oracle banking platform 2.6.2

oracle banking platform 2.7.0

oracle banking platform 2.7.1

oracle bi publisher 5.5.0.0.0

oracle bi publisher 11.1.1.9.0

oracle bi publisher 12.2.1.3.0

oracle bi publisher 12.2.1.4.0

oracle big data spatial and graph 23.1

oracle business activity monitoring 12.2.1.4.0

oracle business intelligence 5.5.0.0.0

oracle business intelligence 5.9.0.0.0

oracle business intelligence 12.2.1.3.0

oracle business intelligence 12.2.1.4.0

oracle business process management suite 12.2.1.3.0

oracle business process management suite 12.2.1.4.0

oracle clinical 5.2.1

oracle clinical 5.2.2

oracle commerce guided search 11.3.2

oracle commerce platform

oracle communications application session controller 3.9.0

oracle communications billing and revenue management 12.0.0.3

oracle communications billing and revenue management 12.0.0.4

oracle communications billing and revenue management elastic charging engine 11.3

oracle communications billing and revenue management elastic charging engine 12.0

oracle communications calendar server 8.0.0.5.0

oracle communications calendar server 8.0.0.6.0

oracle communications cloud native core automated test suite 1.8.0

oracle communications cloud native core binding support function 1.9.0

oracle communications cloud native core binding support function 1.10.0

oracle communications cloud native core console 1.7.0

oracle communications cloud native core network function cloud native environment 1.9.0

oracle communications cloud native core network repository function 1.14.0

oracle communications cloud native core policy 1.14.0

oracle communications cloud native core security edge protection proxy 1.5.0

oracle communications cloud native core security edge protection proxy 1.6.0

oracle communications cloud native core security edge protection proxy 1.15.0

oracle communications cloud native core service communication proxy 1.14.0

oracle communications cloud native core unified data repository 1.14.0

oracle communications contacts server 8.0.0.3.0

oracle communications converged application server - service controller 6.2

oracle communications convergence 3.0.2.2.0

oracle communications convergent charging controller

oracle communications convergent charging controller 6.0.1.0.0

oracle communications data model 11.3.2.1.0

oracle communications data model 11.3.2.2.0

oracle communications data model 11.3.2.3.0

oracle communications data model 12.1.0.1.0

oracle communications data model 12.1.2.0.0

oracle communications design studio 7.3.4

oracle communications design studio 7.3.5

oracle communications design studio 7.4.0

oracle communications design studio 7.4.1

oracle communications design studio 7.4.2

oracle communications diameter signaling route

oracle communications eagle application processor

oracle communications instant messaging server 10.0.1.5.0

oracle communications interactive session recorder 6.3

oracle communications interactive session recorder 6.4

oracle communications messaging server 8.1

oracle communications metasolv solution 6.3.1

oracle communications network charging and control

oracle communications network charging and control 6.0.1.0.0

oracle communications network integrity 7.3.5

oracle communications network integrity 7.3.6

oracle communications offline mediation controller 12.0.0.3

oracle communications operations monitor 3.4

oracle communications operations monitor 4.2

oracle communications operations monitor 4.3

oracle communications operations monitor 4.4

oracle communications operations monitor 5.0

oracle communications pricing design center 12.0.0.3.0

oracle communications pricing design center 12.0.0.4.0

oracle communications service broker 6.2

oracle communications services gatekeeper 7.0

oracle communications session border controller 8.2

oracle communications session border controller 8.3

oracle communications session border controller 8.4

oracle communications session border controller 9.0

oracle communications unified inventory management 7.3.0

oracle communications unified inventory management 7.3.4

oracle communications unified inventory management 7.3.5

oracle communications unified inventory management 7.4.0

oracle communications unified inventory management 7.4.1

oracle communications unified inventory management 7.4.2

oracle communications unified inventory management 7.5.0

oracle communications webrtc session controller 7.2.0

oracle communications webrtc session controller 7.2.1

oracle data integrator 12.2.1.3.0

oracle data integrator 12.2.1.4.0

oracle database server 12.1.0.1

oracle database server 12.1.0.2

oracle database server 19c

oracle database server 21c

oracle demantra demand management

oracle documaker

oracle e-business suite

oracle enterprise communications broker 3.3

oracle enterprise data quality 12.2.1.3.0

oracle enterprise data quality 12.2.1.4.0

oracle enterprise manager base platform 13.4.0.0

oracle enterprise manager base platform 13.5.0.0

oracle enterprise manager ops center 12.4.0.0

oracle enterprise session border controller 8.4

oracle enterprise session border controller 9.0

oracle essbase

oracle essbase 11.1.2.4.47

oracle essbase administration services

oracle essbase administration services 11.1.2.4.47

oracle financial services analytical applications infrastructure

oracle financial services analytical applications infrastructure 7.3.3

oracle financial services behavior detection platform 8.0.7

oracle financial services behavior detection platform 8.0.8

oracle financial services behavior detection platform 8.0.11

oracle financial services enterprise case management 8.0.7

oracle financial services enterprise case management 8.0.8

oracle financial services enterprise case management 8.0.11

oracle financial services foreign account tax compliance act management 8.0.7

oracle financial services foreign account tax compliance act management 8.0.8

oracle financial services foreign account tax compliance act management 8.0.11

oracle financial services model management and governance

oracle financial services trade-based anti money laundering 8.0.7

oracle financial services trade-based anti money laundering 8.0.8

oracle flexcube investor servicing 12.0.4

oracle flexcube investor servicing 12.1.0

oracle flexcube investor servicing 12.3.0

oracle flexcube investor servicing 12.4.0

oracle flexcube investor servicing 14.4.0

oracle flexcube investor servicing 14.5.0

oracle flexcube private banking 12.0.0

oracle flexcube private banking 12.1.0

oracle fusion middleware 12.2.1.3.0

oracle fusion middleware 12.2.1.4.0

oracle fusion middleware mapviewer 12.2.1.4.0

oracle goldengate

oracle goldengate application adapters 19.1.0.0.0

oracle graalvm 20.3.4

oracle graalvm 21.3.0

oracle graph server and client

oracle health sciences clinical development analytics 4.0.1

oracle health sciences inform crf submit 6.2.1

oracle health sciences information manager 3.0.2

oracle health sciences information manager 3.0.3

oracle healthcare data repository 7.0.2

oracle healthcare data repository 8.1.0

oracle healthcare data repository 8.1.1

oracle healthcare foundation

oracle healthcare foundation 8.1.0

oracle healthcare foundation 8.1.1

oracle healthcare translational research 4.1.0

oracle hospitality cruise shipboard property management system 20.1.0

oracle hospitality opera 5 property services 5.6

oracle hospitality reporting and analytics 9.1.0

oracle hospitality suite8 8.10.2

oracle hospitality suite8 8.11.0

oracle hospitality suite8 8.12.0

oracle hospitality suite8 8.13.0

oracle hospitality suite8 8.14.0

oracle http server 12.2.1.3.0

oracle http server 12.2.1.4.0

oracle hyperion financial management 11.1.2.4

oracle hyperion financial management 11.2.6.0

oracle hyperion ilearning 6.2

oracle hyperion ilearning 6.3

oracle hyperion infrastructure technology 11.2.7.0

oracle instantis enterprisetrack 17.1

oracle instantis enterprisetrack 17.2

oracle instantis enterprisetrack 17.3

oracle insurance data gateway 11.0.2

oracle insurance data gateway 11.1.0

oracle insurance data gateway 11.2.7

oracle insurance data gateway 11.3.0

oracle insurance data gateway 11.3.1

oracle insurance insbridge rating and underwriting

oracle insurance insbridge rating and underwriting 5.2.0

oracle insurance policy administration 11.0.2

oracle insurance policy administration 11.1.0

oracle insurance policy administration 11.2.7

oracle insurance policy administration 11.3.0

oracle insurance policy administration 11.3.1

oracle insurance policy administration j2ee

oracle insurance policy administration j2ee 10.2.0

oracle insurance policy administration j2ee 10.2.4

oracle insurance policy administration j2ee 11.0.2

oracle insurance rules palette

oracle insurance rules palette 10.2.0

oracle insurance rules palette 10.2.4

oracle insurance rules palette 11.0.2

oracle insurance rules palette 11.3.1

oracle java se 7u321

oracle java se 8u311

oracle java se 17.1

oracle jd edwards enterpriseone orchestrator

oracle jdk 11.0.13

oracle managed file transfer 12.2.1.3.0

oracle managed file transfer 12.2.1.4.0

oracle mysql cluster

oracle mysql connectors

oracle mysql connectors 8.0.27

oracle mysql server

oracle mysql server 5.7.36

oracle mysql workbench

oracle nosql database

oracle oss support tools

oracle peoplesoft enterprise cs sa integration pack 9.0

oracle peoplesoft enterprise cs sa integration pack 9.2

oracle peoplesoft enterprise people tools 8.57

oracle peoplesoft enterprise people tools 8.58

oracle peoplesoft enterprise people tools 8.59

oracle peoplesoft enterprise peopletools 8.57

oracle peoplesoft enterprise peopletools 8.58

oracle policy automation

oracle policy automation 10.4.7

oracle primavera analytics 18.8.3.3

oracle primavera analytics 19.12.11.1

oracle primavera analytics 20.12.12.0

oracle primavera data warehouse 18.8.3.3

oracle primavera data warehouse 19.12.11.1

oracle primavera data warehouse 20.12.12.0

oracle primavera gateway

oracle primavera gateway 21.12.0

oracle primavera p6 enterprise project portfolio management

oracle primavera p6 enterprise project portfolio management 21.12.0.0

oracle primavera p6 professional project management

oracle primavera portfolio management

oracle primavera portfolio management 20.0.0.0

oracle primavera portfolio management 20.0.0.1

oracle primavera unifier

oracle primavera unifier 18.8

oracle primavera unifier 19.12

oracle primavera unifier 20.12

oracle primavera unifier 21.12

oracle rapid planning

oracle real-time decision server 3.2.0.0

oracle real user experience insight 13.4.1.0

oracle real user experience insight 13.5.1.0

oracle rest data services 21.2.4

oracle retail allocation 14.1.3.2

oracle retail allocation 15.0.3.1

oracle retail allocation 16.0.3

oracle retail allocation 19.0.1

oracle retail analytics

oracle retail assortment planning 16.0.3

oracle retail back office 14.1

oracle retail central office 14.1

oracle retail customer insights

oracle retail customer management and segmentation foundation

oracle retail eftlink 16.0.3

oracle retail eftlink 17.0.2

oracle retail eftlink 18.0.1

oracle retail eftlink 19.0.1

oracle retail eftlink 20.0.1

oracle retail extract transform and load 13.2.8

oracle retail financial integration 14.1.3.2

oracle retail financial integration 15.0.3.1

oracle retail financial integration 16.0.3

oracle retail financial integration 19.0.1

oracle retail fiscal management 14.2

oracle retail integration bus

oracle retail integration bus 13.0

oracle retail integration bus 14.1.3.0

oracle retail integration bus 14.1.3.2

oracle retail integration bus 15.0.3.1

oracle retail integration bus 19.0.0

oracle retail integration bus 19.0.1

oracle retail invoice matching 15.0.3

oracle retail invoice matching 16.0.3

oracle retail merchandising system 19.0.1

oracle retail order broker 16.0

oracle retail order broker 18.0

oracle retail order broker 19.1

oracle retail order management system 19.5

oracle retail point-of-sale 14.1

oracle retail predictive application server 14.1.3

oracle retail predictive application server 14.1.3.46

oracle retail predictive application server 15.0.3

oracle retail predictive application server 15.0.3.115

oracle retail predictive application server 16.0.3

oracle retail predictive application server 16.0.3.240

oracle retail price management 13.2

oracle retail price management 14.0.4

oracle retail price management 14.1

oracle retail price management 14.1.3

oracle retail price management 15.0

oracle retail price management 15.0.3

oracle retail price management 16.0

oracle retail price management 16.0.3

oracle retail returns management 14.1

oracle retail service backbone

oracle retail service backbone 14.1.3.0

oracle retail service backbone 14.1.3.2

oracle retail service backbone 15.0.3.1

oracle retail service backbone 19.0.0

oracle retail service backbone 19.0.1

oracle retail size profile optimization 16.0.3

oracle retail xstore point of service 17.0.4

oracle retail xstore point of service 18.0.3

oracle retail xstore point of service 19.0.2

oracle retail xstore point of service 20.0.1

oracle sd-wan aware 8.2

oracle sd-wan edge 9.0

oracle sd-wan edge 9.1

oracle secure backup 18.1.0.1.0

oracle siebel applications

oracle spatial studio 21.2.1

oracle thesaurus management system 5.2.3

oracle thesaurus management system 5.3.0

oracle thesaurus management system 5.3.1

oracle timesten in-memory database

oracle utilities framework

oracle utilities framework 4.2.0.2.0

oracle utilities framework 4.2.0.3.0

oracle utilities framework 4.4.0.0.0

oracle utilities framework 4.4.0.2.0

oracle utilities framework 4.4.0.3.0

oracle utilities testing accelerator 6.0.0.1.1

oracle utilities testing accelerator 6.0.0.2.2

oracle utilities testing accelerator 6.0.0.3.1

oracle vm virtualbox

oracle webcenter portal 12.2.1.3.0

oracle webcenter portal 12.2.1.4.0

oracle weblogic server 12.1.3.0.0

oracle weblogic server 12.2.1.3.0

oracle weblogic server 12.2.1.4.0

oracle weblogic server 14.1.1.0.0

oracle zfs storage appliance kit 8.8

oracle zfs storage application integration engineering software 1.3.3

oracle solaris 10

oracle solaris 11

oracle fujitsu m10-1 firmware -

oracle fujitsu m10-4 firmware -

oracle fujitsu m10-4s firmware -

oracle fujitsu m12-1 firmware -

oracle fujitsu m12-2 firmware -

oracle fujitsu m12-2s firmware -

Vendor Advisories

Debian Bug report logs - #948235 libhibernate-validator-java: CVE-2019-10219 Package: libhibernate-validator-java; Maintainer for libhibernate-validator-java is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Source for libhibernate-validator-java is src:libhibernate-validator-java (PTS, buildd, popcon) ...
Synopsis Important: Red Hat Fuse 780 release and security update Type/Severity Security Advisory: Important Topic A minor version update (from 77 to 78) is now available for Red Hat Fuse The purpose of this text-only errata is to inform you about the security issues fixed in this releaseRed Hat Produc ...
Synopsis Important: Red Hat Data Grid 736 security update Type/Severity Security Advisory: Important Topic An update for Red Hat Data Grid is now availableRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, whic ...
Synopsis Important: Red Hat Single Sign-On 736 security update Type/Severity Security Advisory: Important Topic A security update is now available for Red Hat Single Sign-On 73 from the Customer PortalRed Hat Product Security has rated this update as having a security impact of Important A Common Vulne ...
Synopsis Important: Red Hat build of Thorntail 251 security and bug fix update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat build of ThorntailRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring ...
Synopsis Important: Red Hat JBoss Enterprise Application Platform 726 on RHEL 8 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Enterprise Application Platform 72 for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as ...
Synopsis Important: Red Hat JBoss Enterprise Application Platform 726 on RHEL 6 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Enterprise Application Platform 72 for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as ...
Synopsis Important: Red Hat JBoss Enterprise Application Platform 726 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Enterprise Application Platform 72Red Hat Product Security has rated this update as having a security impact of Important ...
Synopsis Important: Red Hat JBoss Enterprise Application Platform 726 on RHEL 7 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Enterprise Application Platform 72 for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as ...
Multiple vulnerabilities have been found in Hitachi Ops Center Common Services CVE-2019-10219, CVE-2020-10693, CVE-2020-25638, CVE-2021-28170, CVE-2022-0866, CVE-2022-1278, CVE-2022-1466, CVE-2022-2625, CVE-2022-2764, CVE-2022-23437 Affected products and versions are listed below Please upgrade your version to the appropriate version ...

Github Repositories

1 Overview 11 VOS RTFSO Segmentation Based on the Microservice Reference Project (MRP) for Quarkus MRP can be used as a reference to get to know various microservice concepts Please have a look at the Implementing Microservices Guide to learn more about the concepts behind MRP The microservice reference project shows how to implement a simple microservice according to the

References

CWE-79CWE-79https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=948235https://nvd.nist.govhttps://www.first.org/epsshttps://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2022-136/index.htmlhttps://access.redhat.com/errata/RHSA-2020:0159https://access.redhat.com/errata/RHSA-2020:0160https://access.redhat.com/errata/RHSA-2020:0161https://access.redhat.com/errata/RHSA-2020:0164https://access.redhat.com/errata/RHSA-2020:0445https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10219https://lists.apache.org/thread.html/r4f8b4e2541be4234946e40d55859273a7eec0f4901e8080ce2406fe6%40%3Cnotifications.accumulo.apache.org%3Ehttps://lists.apache.org/thread.html/r4f92d7f7682dcff92722fa947f9e6f8ba2227c5dc3e11ba09114897d%40%3Cnotifications.accumulo.apache.org%3Ehttps://lists.apache.org/thread.html/r87b7e2d22982b4ca9f88f5f4f22a19b394d2662415b233582ed22ebf%40%3Cnotifications.accumulo.apache.org%3Ehttps://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4%40%3Cpluto-scm.portals.apache.org%3Ehttps://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c%40%3Cpluto-dev.portals.apache.org%3Ehttps://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a%40%3Cpluto-dev.portals.apache.org%3Ehttps://security.netapp.com/advisory/ntap-20220210-0024/https://www.oracle.com/security-alerts/cpujan2022.htmlhttps://access.redhat.com/errata/RHSA-2020:0159https://access.redhat.com/errata/RHSA-2020:0160https://access.redhat.com/errata/RHSA-2020:0161https://access.redhat.com/errata/RHSA-2020:0164https://access.redhat.com/errata/RHSA-2020:0445https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10219https://lists.apache.org/thread.html/r4f8b4e2541be4234946e40d55859273a7eec0f4901e8080ce2406fe6%40%3Cnotifications.accumulo.apache.org%3Ehttps://lists.apache.org/thread.html/r4f92d7f7682dcff92722fa947f9e6f8ba2227c5dc3e11ba09114897d%40%3Cnotifications.accumulo.apache.org%3Ehttps://lists.apache.org/thread.html/r87b7e2d22982b4ca9f88f5f4f22a19b394d2662415b233582ed22ebf%40%3Cnotifications.accumulo.apache.org%3Ehttps://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4%40%3Cpluto-scm.portals.apache.org%3Ehttps://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c%40%3Cpluto-dev.portals.apache.org%3Ehttps://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a%40%3Cpluto-dev.portals.apache.org%3Ehttps://security.netapp.com/advisory/ntap-20220210-0024/https://www.oracle.com/security-alerts/cpujan2022.html