{"schemaVersion":3,"id":"CVE-2019-17359","aliases":["GHSA-2mh8-gx2m-mr75"],"status":"published","duplicateOf":null,"title":null,"description":"The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.","dates":{"published":"2019-10-08T13:39:54.000Z","modified":"2024-08-05T01:40:15.255Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0912,"percentile":0.95264,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0.1700000000000007,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.0895},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0912,"percentile":0.95264}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0895,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0912,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0912,"percentile":0.95264}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/770.html"}],"affected":[{"vendor":"apache","product":"tomee","name":"tomee","label":"tomee","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.0.7","noFixRecorded":false,"fixedIn":null},{"text":"7.1.2","noFixRecorded":false,"fixedIn":null},{"text":"8.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0.7 | 7.1.2 | 8.0.1","eol":null,"hubHref":"/vendor/apache/tomee"},{"vendor":"bouncycastle","product":"bc-java","name":"bc-java","label":"bc-java","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.63","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.63","eol":null,"hubHref":"/vendor/bouncycastle/bc-java"},{"vendor":"org.bouncycastle","product":"bcprov-jdk14","name":"org.bouncycastle:bcprov-jdk14","label":"bcprov-jdk14","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.bouncycastle/bcprov-jdk14","purlType":"maven","versions":[{"text":"≥ 1.63, < 1.64","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.63, < 1.64","eol":null,"hubHref":null},{"vendor":"netapp","product":"active_iq_unified_manager","name":"active iq unified manager","label":"active_iq_unified_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 7.3","noFixRecorded":true,"fixedIn":null},{"text":"≥ 9.5","noFixRecorded":true,"fixedIn":null}],"versionsText":"≥ 7.3 (No fix recorded) | ≥ 9.5 (No fix recorded)","eol":null,"hubHref":"/vendor/netapp/active_iq_unified_manager"},{"vendor":"netapp","product":"oncommand_api_services","name":"oncommand api services","label":"oncommand_api_services","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/oncommand_api_services"},{"vendor":"netapp","product":"oncommand_workflow_automation","name":"oncommand workflow automation","label":"oncommand_workflow_automation","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/oncommand_workflow_automation"},{"vendor":"netapp","product":"service_level_manager","name":"service level manager","label":"service_level_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/service_level_manager"},{"vendor":"oracle","product":"business_process_management_suite","name":"business process management suite","label":"business_process_management_suite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.2.1.3.0","noFixRecorded":false,"fixedIn":null},{"text":"12.2.1.4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.2.1.3.0 | 12.2.1.4.0","eol":null,"hubHref":"/vendor/oracle/business_process_management_suite"},{"vendor":"oracle","product":"communications_convergence","name":"communications convergence","label":"communications_convergence","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.1.0, ≤ 3.0.2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.1.0, ≤ 3.0.2.1","eol":null,"hubHref":"/vendor/oracle/communications_convergence"},{"vendor":"oracle","product":"communications_diameter_signaling_router","name":"communications diameter signaling router","label":"communications_diameter_signaling_router","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.0.0, ≤ 8.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.0.0, ≤ 8.2.2","eol":null,"hubHref":"/vendor/oracle/communications_diameter_signaling_router"},{"vendor":"oracle","product":"communications_session_route_manager","name":"communications session route manager","label":"communications_session_route_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.2.0, ≤ 8.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.2.0, ≤ 8.2.2","eol":null,"hubHref":"/vendor/oracle/communications_session_route_manager"},{"vendor":"oracle","product":"data_integrator","name":"data integrator","label":"data_integrator","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.2.1.4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.2.1.4.0","eol":null,"hubHref":"/vendor/oracle/data_integrator"},{"vendor":"oracle","product":"financial_services_analytical_applications_infrastructure","name":"financial services analytical applications infrastructure","label":"financial_services_analytical_applications_infrastructure","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.0.6, ≤ 8.0.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.0.6, ≤ 8.0.9","eol":null,"hubHref":"/vendor/oracle/financial_services_analytical_applications_infrastructure"},{"vendor":"oracle","product":"flexcube_private_banking","name":"flexcube private banking","label":"flexcube_private_banking","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.0.0","noFixRecorded":false,"fixedIn":null},{"text":"12.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.0.0 | 12.1.0","eol":null,"hubHref":"/vendor/oracle/flexcube_private_banking"},{"vendor":"oracle","product":"hospitality_guest_access","name":"hospitality guest access","label":"hospitality_guest_access","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.2.0","eol":null,"hubHref":"/vendor/oracle/hospitality_guest_access"},{"vendor":"oracle","product":"managed_file_transfer","name":"managed file transfer","label":"managed_file_transfer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.2.1.3.0","noFixRecorded":false,"fixedIn":null},{"text":"12.2.1.4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.2.1.3.0 | 12.2.1.4.0","eol":null,"hubHref":"/vendor/oracle/managed_file_transfer"},{"vendor":"oracle","product":"peoplesoft_enterprise_hcm_global_payroll_switzerland","name":"peoplesoft enterprise hcm global payroll switzerland","label":"peoplesoft_enterprise_hcm_global_payroll_switzerland","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"9.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.2","eol":null,"hubHref":"/vendor/oracle/peoplesoft_enterprise_hcm_global_payroll_switzerland"},{"vendor":"oracle","product":"peoplesoft_enterprise_peopletools","name":"PeopleSoft Enterprise PeopleTools","label":"peoplesoft_enterprise_peopletools","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"8.56","noFixRecorded":false,"fixedIn":null},{"text":"8.57","noFixRecorded":false,"fixedIn":null},{"text":"8.58","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.56 | 8.57 | 8.58","eol":null,"hubHref":"/vendor/oracle/peoplesoft_enterprise_peopletools"},{"vendor":"oracle","product":"retail_xstore_point_of_service","name":"retail xstore point of service","label":"retail_xstore_point_of_service","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"18.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"18.0.1","eol":null,"hubHref":"/vendor/oracle/retail_xstore_point_of_service"},{"vendor":"oracle","product":"soa_suite","name":"soa suite","label":"soa_suite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.2.1.3.0","noFixRecorded":false,"fixedIn":null},{"text":"12.2.1.4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.2.1.3.0 | 12.2.1.4.0","eol":null,"hubHref":"/vendor/oracle/soa_suite"},{"vendor":"oracle","product":"webcenter_portal","name":"webcenter portal","label":"webcenter_portal","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"11.1.1.9.0","noFixRecorded":false,"fixedIn":null},{"text":"12.2.1.3.0","noFixRecorded":false,"fixedIn":null},{"text":"12.2.1.4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.1.1.9.0 | 12.2.1.3.0 | 12.2.1.4.0","eol":null,"hubHref":"/vendor/oracle/webcenter_portal"},{"vendor":"oracle","product":"weblogic_server","name":"WebLogic Server","label":"weblogic_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.2.1.3.0","noFixRecorded":false,"fixedIn":null},{"text":"12.2.1.4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.2.1.3.0 | 12.2.1.4.0","eol":null,"hubHref":"/vendor/oracle/weblogic_server"}],"affectedCount":22,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.apache.org/thread.html/r467ade3fef3493f1fff1a68a256d087874e1f858ad1de7a49fe05d27%40%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r4d475dcaf4f57115fa57d8e06c3823ca398b35468429e7946ebaefdc%40%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r16c3a90cb35ae8a9c74fd5c813c16d6ac255709c9f9d71cd409e007d%40%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r02f887807a49cfd1f1ad53f7a61f3f8e12f60ba2c930bec163031209%40%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r91b07985b1307390a58c5b9707f0b28ef8e9c9e1c86670459f20d601%40%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/re60f980c092ada4bfe236dcfef8b6ca3e8f3b150fc0f51b8cc13d59d%40%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r8ecb5b76347f84b6e3c693f980dbbead88c25f77b815053c4e6f2c30%40%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/r79b6a6aa0dd1aeb57bd253d94794bc96f1ec005953c4bd5414cc0db0%40%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","label":"www.oracle.com/security-alerts/cpuapr2020.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB","Patch","Third Party Advisory"]},{"url":"https://www.bouncycastle.org/releasenotes.html","label":"www.bouncycastle.org/releasenotes.html","hostname":"www.bouncycastle.org","tags":["X Refsource MISC","WEB","Release Notes","Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","label":"www.oracle.com/security-alerts/cpujul2020.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB","Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","label":"www.oracle.com/security-alerts/cpujan2020.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB","Patch","Third Party Advisory"]},{"url":"https://www.bouncycastle.org/latest_releases.html","label":"www.bouncycastle.org/latest_releases.html","hostname":"www.bouncycastle.org","tags":["X Refsource MISC","WEB","Release Notes","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20191024-0006/","label":"security.netapp.com/advisory/ntap-20191024-0006/","hostname":"security.netapp.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","label":"www.oracle.com/security-alerts/cpuoct2020.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB","Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","label":"www.oracle.com/security-alerts/cpujan2021.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB","Patch","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17359","label":"nvd.nist.gov/vuln/detail/CVE-2019-17359","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20191024-0006","label":"security.netapp.com/advisory/ntap-20191024-0006","hostname":"security.netapp.com","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/re60f980c092ada4bfe236dcfef8b6ca3e8f3b150fc0f51b8cc13d59d@%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r91b07985b1307390a58c5b9707f0b28ef8e9c9e1c86670459f20d601@%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r8ecb5b76347f84b6e3c693f980dbbead88c25f77b815053c4e6f2c30@%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r79b6a6aa0dd1aeb57bd253d94794bc96f1ec005953c4bd5414cc0db0@%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r4d475dcaf4f57115fa57d8e06c3823ca398b35468429e7946ebaefdc@%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r467ade3fef3493f1fff1a68a256d087874e1f858ad1de7a49fe05d27@%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r16c3a90cb35ae8a9c74fd5c813c16d6ac255709c9f9d71cd409e007d@%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]},{"url":"https://lists.apache.org/thread.html/r02f887807a49cfd1f1ad53f7a61f3f8e12f60ba2c930bec163031209@%3Ccommits.tomee.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10661-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10661-1"]},"timeline":[{"kind":"published","date":"2019-10-08T13:39:54.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T01:40:15.255Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":32,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T10:03:06.722Z","stale":false,"partial":false}}