{"schemaVersion":3,"id":"CVE-2019-12402","aliases":["MGASA-2020-0001","UBUNTU-CVE-2019-12402","DEBIAN-CVE-2019-12402","CGA-27jf-7f4q-jg67","CGA-2hjq-hjxc-vv9c","CGA-2wcc-948c-qxv7","CGA-5269-h463-8r7w","CGA-6f62-99cj-mv2f","CGA-6m45-p35v-68w8","CGA-7p7m-9hc3-hc4g","CGA-83gv-2r6v-g45j","CGA-8v8w-x7j8-7qhv","CGA-9qgx-rwvq-hm58","CGA-c5xm-v2rh-vqmf","CGA-c725-gjcf-4vp9","CGA-cg6r-9xj3-9gvh","CGA-f3xp-g9m2-xcfv","CGA-f6gx-3p28-hwrg","CGA-f6wv-9g8r-8hx7","CGA-g7gp-7r58-859r","CGA-g9rm-wvwx-f7c6","CGA-gcqq-4rg5-fm9g","CGA-grxh-6wxj-mpc2","CGA-h93r-fxc9-r4gp","CGA-hrx4-fg8x-mqfp","CGA-j4m6-95mh-mx66","CGA-p858-rpx3-g34c","CGA-p88w-74pg-2f6j","CGA-ph96-p5fg-fqhp","GHSA-53x6-4x5p-rrvv","CGA-qc27-5xgr-jrrj","CGA-qj2w-jcg5-ww95","CGA-rh7p-rmv4-2hh8","CGA-whv7-r848-xg8x","CGA-wvvr-6j73-q2q6","CGA-x3cr-36h3-99mv","CGA-x8gf-qg76-h2q7","CGA-x9h3-q9cc-8cqv"],"status":"published","duplicateOf":null,"title":null,"description":"The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.","dates":{"published":"2019-08-29T00:00:00.000Z","modified":"2024-08-04T23:17:39.992Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Maven","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":0.16157,"percentile":0.96901,"severity":"medium","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.16157},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.16157,"percentile":0.96901}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.16157,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.16157,"percentile":0.96901}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-835","name":"Loop with Unreachable Exit Condition ('Infinite Loop')","description":"The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/835.html"}],"affected":[{"vendor":"apache software foundation","product":"apache commons compress","name":"Apache Commons Compress","label":"apache commons compress","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.15 to 1.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.15 to 1.18","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_commons_compress"},{"vendor":"apache","product":"commons_compress","name":"commons compress","label":"commons_compress","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.15, ≤ 1.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.15, ≤ 1.18","eol":null,"hubHref":"/vendor/apache/commons_compress"},{"vendor":"chainguard","product":"eco-java-gradle-5.0","name":"eco-java-gradle-5.0","label":"eco-java-gradle-5.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.1","name":"eco-java-gradle-5.1","label":"eco-java-gradle-5.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.1.1","name":"eco-java-gradle-5.1.1","label":"eco-java-gradle-5.1.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.1.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.2","name":"eco-java-gradle-5.2","label":"eco-java-gradle-5.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.2.1","name":"eco-java-gradle-5.2.1","label":"eco-java-gradle-5.2.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.2.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.3","name":"eco-java-gradle-5.3","label":"eco-java-gradle-5.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.3.1","name":"eco-java-gradle-5.3.1","label":"eco-java-gradle-5.3.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.3.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.4","name":"eco-java-gradle-5.4","label":"eco-java-gradle-5.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.4.1","name":"eco-java-gradle-5.4.1","label":"eco-java-gradle-5.4.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.4.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.5","name":"eco-java-gradle-5.5","label":"eco-java-gradle-5.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.5.1","name":"eco-java-gradle-5.5.1","label":"eco-java-gradle-5.5.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.5.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.6","name":"eco-java-gradle-5.6","label":"eco-java-gradle-5.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.6.1","name":"eco-java-gradle-5.6.1","label":"eco-java-gradle-5.6.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.6.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.6.2","name":"eco-java-gradle-5.6.2","label":"eco-java-gradle-5.6.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.6.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.6.3","name":"eco-java-gradle-5.6.3","label":"eco-java-gradle-5.6.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.6.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-5.6.4","name":"eco-java-gradle-5.6.4","label":"eco-java-gradle-5.6.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-5.6.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.3.6","name":"hadoop-fips-3.3.6","label":"hadoop-fips-3.3.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.3.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"libcommons-compress-java","name":"libcommons-compress-java","label":"libcommons-compress-java","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libcommons-compress-java","purlType":"deb","versions":[{"text":"< 1.18-3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18-3","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libcommons-compress-java","name":"libcommons-compress-java","label":"libcommons-compress-java","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libcommons-compress-java","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"30","noFixRecorded":false,"fixedIn":null},{"text":"31","noFixRecorded":false,"fixedIn":null}],"versionsText":"30 | 31","eol":{"isEol":true,"eolDate":"2020-05-26T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"30","label":"30","eolFrom":"2020-05-26T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"mageia","product":"apache-commons-compress","name":"apache-commons-compress","label":"apache-commons-compress","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/apache-commons-compress","purlType":"rpm","versions":[{"text":"< 1.19-1.mga7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.19-1.mga7","eol":null,"hubHref":null},{"vendor":"io.github.1tchy.java9modular.org.apache.commons","product":"commons-compress","name":"io.github.1tchy.java9modular.org.apache.commons:commons-compress","label":"commons-compress","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/io.github.1tchy.java9modular.org.apache.commons/commons-compress","purlType":"maven","versions":[{"text":"1.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.18.1","eol":null,"hubHref":null},{"vendor":"org.apache.commons","product":"commons-compress","name":"org.apache.commons:commons-compress","label":"commons-compress","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.commons/commons-compress","purlType":"maven","versions":[{"text":"≥ 1.15, < 1.19","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.15, < 1.19","eol":null,"hubHref":null},{"vendor":"oracle","product":"banking_payments","name":"banking payments","label":"banking_payments","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 14.1.0, ≤ 14.4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 14.1.0, ≤ 14.4.0","eol":null,"hubHref":"/vendor/oracle/banking_payments"},{"vendor":"oracle","product":"banking_platform","name":"banking platform","label":"banking_platform","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.6.2","noFixRecorded":false,"fixedIn":null},{"text":"2.7.0","noFixRecorded":false,"fixedIn":null},{"text":"2.8.0","noFixRecorded":false,"fixedIn":null},{"text":"2.9.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.6.2 | 2.7.0 | 2.8.0 | 2.9.0","eol":null,"hubHref":"/vendor/oracle/banking_platform"},{"vendor":"oracle","product":"communications_element_manager","name":"communications element manager","label":"communications_element_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.2.0, ≤ 8.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.2.0, ≤ 8.2.2","eol":null,"hubHref":"/vendor/oracle/communications_element_manager"},{"vendor":"oracle","product":"communications_ip_service_activator","name":"communications ip service activator","label":"communications_ip_service_activator","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.3.0","noFixRecorded":false,"fixedIn":null},{"text":"7.4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.3.0 | 7.4.0","eol":null,"hubHref":"/vendor/oracle/communications_ip_service_activator"},{"vendor":"oracle","product":"communications_session_report_manager","name":"communications session report manager","label":"communications_session_report_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.2.0, ≤ 8.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.2.0, ≤ 8.2.2","eol":null,"hubHref":"/vendor/oracle/communications_session_report_manager"},{"vendor":"oracle","product":"communications_session_route_manager","name":"communications session route manager","label":"communications_session_route_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.2.0, ≤ 8.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.2.0, ≤ 8.2.2","eol":null,"hubHref":"/vendor/oracle/communications_session_route_manager"},{"vendor":"oracle","product":"customer_management_and_segmentation_foundation","name":"customer management and segmentation foundation","label":"customer_management_and_segmentation_foundation","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"18.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"18.0","eol":null,"hubHref":"/vendor/oracle/customer_management_and_segmentation_foundation"},{"vendor":"oracle","product":"essbase","name":"essbase","label":"essbase","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"21.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"21.2","eol":null,"hubHref":"/vendor/oracle/essbase"},{"vendor":"oracle","product":"flexcube_investor_servicing","name":"flexcube investor servicing","label":"flexcube_investor_servicing","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.1.0","noFixRecorded":false,"fixedIn":null},{"text":"12.3.0","noFixRecorded":false,"fixedIn":null},{"text":"12.4.0","noFixRecorded":false,"fixedIn":null},{"text":"14.0.0","noFixRecorded":false,"fixedIn":null},{"text":"14.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.1.0 | 12.3.0 | 12.4.0 | 14.0.0 | 14.1.0","eol":null,"hubHref":"/vendor/oracle/flexcube_investor_servicing"},{"vendor":"oracle","product":"flexcube_private_banking","name":"flexcube private banking","label":"flexcube_private_banking","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.0.0","noFixRecorded":false,"fixedIn":null},{"text":"12.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.0.0 | 12.1.0","eol":null,"hubHref":"/vendor/oracle/flexcube_private_banking"},{"vendor":"oracle","product":"hyperion_infrastructure_technology","name":"hyperion infrastructure technology","label":"hyperion_infrastructure_technology","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"11.1.2.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.1.2.4","eol":null,"hubHref":"/vendor/oracle/hyperion_infrastructure_technology"},{"vendor":"oracle","product":"jdeveloper","name":"jdeveloper","label":"jdeveloper","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.2.1.4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.2.1.4.0","eol":null,"hubHref":"/vendor/oracle/jdeveloper"},{"vendor":"oracle","product":"peoplesoft_enterprise_pt_peopletools","name":"peoplesoft enterprise pt peopletools","label":"peoplesoft_enterprise_pt_peopletools","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"8.56","noFixRecorded":false,"fixedIn":null},{"text":"8.57","noFixRecorded":false,"fixedIn":null},{"text":"8.58","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.56 | 8.57 | 8.58","eol":null,"hubHref":"/vendor/oracle/peoplesoft_enterprise_pt_peopletools"},{"vendor":"oracle","product":"primavera_gateway","name":"primavera gateway","label":"primavera_gateway","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 18.8.0, ≤ 18.8.8","noFixRecorded":false,"fixedIn":null},{"text":"19.12.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 18.8.0, ≤ 18.8.8 | 19.12.0","eol":null,"hubHref":"/vendor/oracle/primavera_gateway"},{"vendor":"oracle","product":"retail_integration_bus","name":"retail integration bus","label":"retail_integration_bus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"15.0","noFixRecorded":false,"fixedIn":null},{"text":"16.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"15.0 | 16.0","eol":null,"hubHref":"/vendor/oracle/retail_integration_bus"},{"vendor":"oracle","product":"retail_xstore_point_of_service","name":"retail xstore point of service","label":"retail_xstore_point_of_service","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"15.0","noFixRecorded":false,"fixedIn":null},{"text":"16.0","noFixRecorded":false,"fixedIn":null},{"text":"17.0","noFixRecorded":false,"fixedIn":null},{"text":"18.0","noFixRecorded":false,"fixedIn":null},{"text":"19.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"15.0 | 16.0 | 17.0 | 18.0 | 19.0","eol":null,"hubHref":"/vendor/oracle/retail_xstore_point_of_service"},{"vendor":"oracle","product":"webcenter_portal","name":"webcenter portal","label":"webcenter_portal","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.2.1.3.0","noFixRecorded":false,"fixedIn":null},{"text":"12.2.1.4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.2.1.3.0 | 12.2.1.4.0","eol":null,"hubHref":"/vendor/oracle/webcenter_portal"}],"affectedCount":42,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://lists.apache.org/thread.html/54cc4e9fa6b24520135f6fa4724dfb3465bc14703c7dc7e52353a0ea%40%3Ccommits.creadur.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QLJIK2AUOZOWXR3S5XXBUNMOF3RTHTI7/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZB3GB7YXIOUKIOQ27VTIP6KKGJJ3CKL/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","WEB"]},{"url":"https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/r5caf4fcb69d2749225391e61db7216282955204849ba94f83afe011f%40%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/rcc35ab6be300365de5ff9587e0479d10d7d7c79070921837e3693162%40%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/re13bd219dd4b651134f6357f12bd07a0344eea7518c577bbdd185265%40%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/r5103b1c9242c0f812ac96e524344144402cbff9b6e078d1557bc7b1e%40%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/r590c15cebee9b8e757e2f738127a9a71e48ede647a3044c504e050a4%40%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/r05cf37c1e1e662e968cfece1102fcd50fe207181fdbf2c30aadfafd3%40%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/rdebc1830d6c09c11d5a4804ca26769dbd292d17d361c61dea50915f0%40%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/rd3f99d732baed459b425fb0a9e9e14f7843c9459b12037e4a9d753b5%40%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/r21d64797914001119d2fc766b88c6da181dc2308d20f14e7a7f46117%40%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/r233267e24519bacd0f9fb9f61a1287cb9f4bcb6e75d83f34f405c521%40%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/r25422df9ad22fec56d9eeca3ab8bd6d66365e9f6bfe311b64730edf5%40%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/r972f82d821b805d04602976a9736c01b6bf218cfe0c3f48b472db488%40%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/r4363c994c8bca033569a98da9218cc0c62bb695c1e47a98e5084e5a0%40%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/rf5230a049d989dbfdd404b4320a265dceeeba459a4d04ec21873bd55%40%3Csolr-user.lucene.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://lists.apache.org/thread.html/r7af60fbd8b2350d49d14e53a3ab2801998b9d1af2d6fcac60b060a53%40%3Cdev.brooklyn.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","WEB"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","label":"www.oracle.com/security-alerts/cpuapr2020.html","hostname":"www.oracle.com","tags":["Third Party Advisory","Advisory","WEB"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","label":"www.oracle.com/security-alerts/cpujul2020.html","hostname":"www.oracle.com","tags":["Third Party Advisory","Advisory","WEB"]},{"url":"https://lists.apache.org/thread.html/308cc15f1f1dc53e97046fddbac240e6cd16de89a2746cf257be7f5b%40%3Cdev.commons.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","label":"www.oracle.com/security-alerts/cpuoct2020.html","hostname":"www.oracle.com","tags":["Third Party Advisory","Advisory","WEB"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","label":"www.oracle.com/security-alerts/cpujan2021.html","hostname":"www.oracle.com","tags":["Third Party Advisory","Advisory","WEB"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","label":"www.oracle.com/security-alerts/cpuApr2021.html","hostname":"www.oracle.com","tags":["Third Party Advisory","Advisory","WEB"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","label":"www.oracle.com//security-alerts/cpujul2021.html","hostname":"www.oracle.com","tags":["Third Party Advisory","Advisory","WEB"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","label":"www.oracle.com/security-alerts/cpuoct2021.html","hostname":"www.oracle.com","tags":["Not Applicable","Third Party Advisory","Advisory","WEB"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","label":"www.oracle.com/security-alerts/cpuapr2022.html","hostname":"www.oracle.com","tags":["Third Party Advisory","Advisory","WEB"]},{"url":"https://security.netapp.com/advisory/ntap-20230818-0001/","label":"security.netapp.com/advisory/ntap-20230818-0001/","hostname":"security.netapp.com","tags":["Advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0001.html","label":"advisories.mageia.org/MGASA-2020-0001.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25365","label":"bugs.mageia.org/show_bug.cgi?id=25365","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QLJIK2AUOZOWXR3S5XXBUNMOF3RTHTI7/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2019-12402","label":"ubuntu.com/security/CVE-2019-12402","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.openwall.com/lists/oss-security/2019/08/27/1","label":"www.openwall.com/lists/oss-security/2019/08/27/1","hostname":"www.openwall.com","tags":["REPORT"]},{"url":"https://lists.apache.org/thread.html/308cc15f1f1dc53e97046fddbac240e6cd16de89a2746cf257be7f5b@%3Cdev.commons.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["REPORT","WEB"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12402","label":"www.cve.org/CVERecord?id=CVE-2019-12402","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-12402","label":"security-tracker.debian.org/tracker/CVE-2019-12402","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12402","label":"nvd.nist.gov/vuln/detail/CVE-2019-12402","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230818-0001","label":"security.netapp.com/advisory/ntap-20230818-0001","hostname":"security.netapp.com","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZB3GB7YXIOUKIOQ27VTIP6KKGJJ3CKL","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QLJIK2AUOZOWXR3S5XXBUNMOF3RTHTI7","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/rf5230a049d989dbfdd404b4320a265dceeeba459a4d04ec21873bd55@%3Csolr-user.lucene.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/re13bd219dd4b651134f6357f12bd07a0344eea7518c577bbdd185265@%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/rdebc1830d6c09c11d5a4804ca26769dbd292d17d361c61dea50915f0@%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/rd3f99d732baed459b425fb0a9e9e14f7843c9459b12037e4a9d753b5@%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/rcc35ab6be300365de5ff9587e0479d10d7d7c79070921837e3693162@%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r972f82d821b805d04602976a9736c01b6bf218cfe0c3f48b472db488@%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r7af60fbd8b2350d49d14e53a3ab2801998b9d1af2d6fcac60b060a53@%3Cdev.brooklyn.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r5caf4fcb69d2749225391e61db7216282955204849ba94f83afe011f@%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r590c15cebee9b8e757e2f738127a9a71e48ede647a3044c504e050a4@%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r5103b1c9242c0f812ac96e524344144402cbff9b6e078d1557bc7b1e@%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r4363c994c8bca033569a98da9218cc0c62bb695c1e47a98e5084e5a0@%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r25422df9ad22fec56d9eeca3ab8bd6d66365e9f6bfe311b64730edf5@%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r233267e24519bacd0f9fb9f61a1287cb9f4bcb6e75d83f34f405c521@%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r21d64797914001119d2fc766b88c6da181dc2308d20f14e7a7f46117@%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r05cf37c1e1e662e968cfece1102fcd50fe207181fdbf2c30aadfafd3@%3Cissues.flink.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe@%3Ccommits.druid.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/54cc4e9fa6b24520135f6fa4724dfb3465bc14703c7dc7e52353a0ea@%3Ccommits.creadur.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://github.com/jensdietrich/xshady-release/tree/main/CVE-2019-12402","label":"github.com/jensdietrich/xshady-release/tree/main/CVE-2019-12402","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10618-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10618-1"]},"timeline":[{"kind":"published","date":"2019-08-29T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-04T23:17:39.992Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":33,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T08:19:25.030Z","stale":false,"partial":false}}