{"id":"CVE-2019-13990","aliases":["CLSA-2026-1778028240","DEBIAN-CVE-2019-13990","EUVD-2020-0548","GHSA-9qcf-c26r-x5rf","MGASA-2021-0133","RHSA-2020:3247","SUSE-SU-2020:0984-1","SUSE-SU-2020:1009-1","UBUNTU-CVE-2019-13990"],"status":"published","title":"XML external entity injection in Terracotta Quartz Scheduler","description":"initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.16628,"percentile":0.97038,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-611"],"published":"2019-07-26T00:00:00Z","modified":"2026-11-02T19:45:28Z","exploits":[{"source":"pocgithub","id":"epicosy/Quartz-1","title":"epicosy/Quartz-1","date":"2024-05-31","url":"https://github.com/epicosy/Quartz-1"}],"fixes":[{"ecosystem":"Maven","package":"org.quartz-scheduler:quartz","fixed_in":["2.3.2"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.quartz-scheduler:quartz","fixed_in":["1.8.5-tuxcare.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libquartz-java","fixed_in":["1:1.8.6-8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libquartz-java","fixed_in":["1:1.8.6-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libquartz-java","fixed_in":["1:1.8.6-8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libquartz2-java","fixed_in":["2.3.0-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libquartz2-java","fixed_in":["2.3.0-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libquartz2-java","fixed_in":["2.3.0-3"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"quartz","fixed_in":["2.2.1-9.1.mga7"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.0","package":"quartz","fixed_in":["2.3.0-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"quartz","fixed_in":["2.3.0-14.3.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.quartz-scheduler:quartz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.quartz-scheduler:quartz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.5"},{"fixed":"1.8.5-tuxcare.1"}]}],"versions":["1.8.5"]},{"source":"osv","ecosystem":"Debian:12","package":"libquartz-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.6-8"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libquartz-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.6-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libquartz-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.6-8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libquartz2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libquartz2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libquartz2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-3"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.quartz-scheduler:quartz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2"}]}],"versions":["1.7.2","1.7.3","1.8.0","1.8.1","1.8.2","1.8.3","1.8.4","1.8.5","1.8.6","2.0.0","2.0.1","2.0.2","2.1.0","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6","2.1.7","2.2.0","2.2.1","2.2.2","2.2.3","2.3.0","2.3.1"]},{"source":"osv","ecosystem":"Mageia:7","package":"quartz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-9.1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"novnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el8ost"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-api-explorer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.6-1.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-health-check-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-cinderlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-imageio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-ovirt-engine-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-vmconsole-proxy-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-tools-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-vmconsole-proxy-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"python3-ovirt-engine-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"rhvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1.8-0.7.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"rhvm-dependencies","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-ui-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.el8ev"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.0","package":"quartz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"quartz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-14.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libquartz-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.7.3-5","1:1.8.6-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libquartz-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.8.6-4","1:1.8.6-5","1:1.8.6-6~18.04"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libquartz2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.3-2","2.2.3-3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libquartz-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.8.6-6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libquartz2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.0-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libquartz-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.8.6-6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libquartz-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.8.6-8"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libquartz-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.8.6-8"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libquartz-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.8.6-8ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libquartz-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.8.6-8","1:1.8.6-8ubuntu1"]}],"products":[{"vendor":"apache","product":"tomee"},{"vendor":"atlassian","product":"jira_service_management"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"cloud_secure_agent"},{"vendor":"oracle","product":"apache_batik_mapviewer"},{"vendor":"oracle","product":"banking_enterprise_originations"},{"vendor":"oracle","product":"banking_enterprise_product_manufacturing"},{"vendor":"oracle","product":"banking_payments"},{"vendor":"oracle","product":"communications_ip_service_activator"},{"vendor":"oracle","product":"communications_session_route_manager"},{"vendor":"oracle","product":"customer_management_and_segmentation_foundation"},{"vendor":"oracle","product":"documaker"},{"vendor":"oracle","product":"enterprise_manager_base_platform"},{"vendor":"oracle","product":"enterprise_manager_ops_center"},{"vendor":"oracle","product":"flexcube_investor_servicing"},{"vendor":"oracle","product":"flexcube_private_banking"},{"vendor":"oracle","product":"fusion_middleware_mapviewer"},{"vendor":"oracle","product":"google_guava_mapviewer"},{"vendor":"oracle","product":"hyperion_infrastructure_technology"},{"vendor":"oracle","product":"jd_edwards_enterpriseone_orchestrator"},{"vendor":"oracle","product":"primavera_unifier"},{"vendor":"oracle","product":"retail_back_office"},{"vendor":"oracle","product":"retail_central_office"},{"vendor":"oracle","product":"retail_integration_bus"},{"vendor":"oracle","product":"retail_order_broker"},{"vendor":"oracle","product":"retail_point-of-service"},{"vendor":"oracle","product":"retail_returns_management"},{"vendor":"oracle","product":"retail_xstore_point_of_service"},{"vendor":"oracle","product":"terracotta_quartz_scheduler_mapviewer"},{"vendor":"oracle","product":"webcenter_sites"},{"vendor":"softwareag","product":"quartz"}],"references":[{"url":"https://lists.apache.org/thread.html/e493e718a50f21201e05e82d42a8796b4046e83f0d286b90e58e0629%40%3Cdev.tomee.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/1870324fea41ea68cff2fd1bf6ee2747432dc1d9d22a22cc681e0ec3%40%3Cdev.tomee.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/6b6e3480b19856365fb5eef03aa0915a4679de4b019a1e975502d949%40%3Cdev.tomee.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/f74b170d3d58d7a24db1afd3908bb0ab58a3900e16e73275674cdfaf%40%3Ccommits.tomee.apache.org%3E","tags":["mailing-list","x_transferred","Patch","fix","web"]},{"url":"https://lists.apache.org/thread.html/172d405e556e2f1204be126bb3eb28c5115af91bcc1651b4e870bb82%40%3Cdev.tomee.apache.org%3E","tags":["mailing-list","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/quartz-scheduler/quartz/issues/467","tags":["x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://lists.apache.org/thread.html/re9b56ac1934d7bf16afc83eac1c39c98c1b20b4b15891dce923bf8aa%40%3Ccommits.tomee.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r3a6884e8d819f32cde8c07b98934de3e80467859880f784950bf44cf%40%3Ccommits.tomee.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r21df13c8bd2c2eae4b9661aae814c4a2a814d1f7875c765b8b115c9a%40%3Ccommits.tomee.apache.org%3E","tags":["mailing-list","x_transferred","Patch","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20221028-0002/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://confluence.atlassian.com/security/ssot-117-cve-2019-13990-xxe-xml-external-entity-injection-vulnerability-in-jira-service-management-data-center-and-jira-service-management-server-1295385959.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13990","tags":["advisory"]},{"url":"https://github.com/quartz-scheduler/quartz/pull/501","tags":["web"]},{"url":"https://github.com/quartz-scheduler/quartz/commit/13c1d45aa1db15d0fa0e4997139c99ba219be551","tags":["web"]},{"url":"https://snyk.io/vuln/SNYK-JAVA-ORGQUARTZSCHEDULER-461170","tags":["web"]},{"url":"https://lists.apache.org/thread.html/172d405e556e2f1204be126bb3eb28c5115af91bcc1651b4e870bb82@%3Cdev.tomee.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/1870324fea41ea68cff2fd1bf6ee2747432dc1d9d22a22cc681e0ec3@%3Cdev.tomee.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/6b6e3480b19856365fb5eef03aa0915a4679de4b019a1e975502d949@%3Cdev.tomee.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/e493e718a50f21201e05e82d42a8796b4046e83f0d286b90e58e0629@%3Cdev.tomee.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/f74b170d3d58d7a24db1afd3908bb0ab58a3900e16e73275674cdfaf@%3Ccommits.tomee.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r21df13c8bd2c2eae4b9661aae814c4a2a814d1f7875c765b8b115c9a@%3Ccommits.tomee.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r3a6884e8d819f32cde8c07b98934de3e80467859880f784950bf44cf@%3Ccommits.tomee.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re9b56ac1934d7bf16afc83eac1c39c98c1b20b4b15891dce923bf8aa@%3Ccommits.tomee.apache.org%3E","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20221028-0002","tags":["web"]},{"url":"https://github.com/advisories/GHSA-9qcf-c26r-x5rf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-13990","tags":["advisory"]},{"url":"https://github.com/quartz-scheduler/quartz","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2021-0133.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26481","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2020-April/006708.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3247","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html-single/technical_notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1080097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1427717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1475774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1507438","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523835","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1527843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1529042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1546838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1547937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593800","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1616451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1637172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640908","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1642273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1647440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1648345","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1650417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1650505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1654069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1654889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1658101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1659161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1663366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1666913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1670102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1679039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1679110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1679471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1679730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687345","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1698009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1698102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701538","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1710491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1711006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1712255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1712746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1712890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1714528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1714633","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1714834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1715725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1716590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1718818","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727025","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729511","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729811","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1731212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1731590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1733031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1733529","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1733843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1734839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1737234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1737684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1740978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1743690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1745384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1745504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1746272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1746430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1746877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1747772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749944","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1750212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1750348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1750357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1750371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1750482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1751215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1751268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1751423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1752890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1752995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1753629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1753661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1753664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1754363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1754490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1755412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758289","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1762281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1763992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1764289","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1764791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1764932","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1764943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1764959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1768707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1768844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1769463","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1771793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1773313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777954","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1779580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1781001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1782236","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1782279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1782882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1784049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1784385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1785750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1796809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1796811","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1796815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1796817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1797316","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1797500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798114","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798117","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798137","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1799171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1799204","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1803597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1805669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1806276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1810893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1811865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1811869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1812875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1814197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1814215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1817467","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1818745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1821164","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1821930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1824095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1825793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1826248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1826437","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1826801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1826855","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1832161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1834523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1838493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1841495","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1842495","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1844270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1844855","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1853444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1854563","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3247.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18635","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18635","tags":["advisory"]},{"url":"https://github.com/novnc/noVNC/releases/tag/v0.6.2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-8331","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-8331","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-8331","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13990","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13990","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19336","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19336","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19336","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7598","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7598","tags":["advisory"]},{"url":"https://snyk.io/vuln/SNYK-JS-MINIMIST-559764","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10775","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10775","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10775","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11022","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11022","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gxr4-xjj5-5px2","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11023","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11023","tags":["advisory"]},{"url":"https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200984-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1143227","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13990","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201009-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-13990","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-13990","description":"initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","status":"published","published":"2019-07-26T00:00:00Z","modified":"2024-10-15T18:22:20.316Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:20:24.357095Z"}],"euvd":[{"id":"EUVD-2020-0548","description":"initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","status":"published","published":"2019-07-26T00:00:00Z","modified":"2024-10-15T18:22:20Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:27:36.689661Z"}],"ghsa":[{"id":"GHSA-9qcf-c26r-x5rf","title":"XML external entity injection in Terracotta Quartz Scheduler","description":"initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","status":"published","published":"2020-07-01T17:55:03Z","modified":"2024-10-15T23:33:07Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:38:10.696798Z"}],"nvd":[{"id":"CVE-2019-13990","description":"initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","status":"published","published":"2019-07-26T19:15:11.73Z","modified":"2026-06-17T02:17:34.603Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:05:21.892729Z"}],"osv":[{"id":"CVE-2019-13990","description":"initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","status":"published","published":"2019-07-26T19:15:11.73Z","modified":"2026-10-24T10:49:49.44058293Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:11.029493Z"},{"id":"DEBIAN-CVE-2019-13990","description":"initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","status":"published","published":"2019-07-26T19:15:11.73Z","modified":"2026-10-05T04:00:04.468570138Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"GHSA-9qcf-c26r-x5rf","title":"XML external entity injection in Terracotta Quartz Scheduler","description":"initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","status":"published","published":"2020-07-01T17:55:03Z","modified":"2024-10-15T23:39:47.179091Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T15:46:44.225359Z"},{"id":"RHSA-2020:3247","title":"Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update","status":"published","published":"2024-09-20T13:57:00Z","modified":"2026-10-09T10:01:51Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"UBUNTU-CVE-2019-13990","description":"initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","status":"published","published":"2019-07-26T19:15:00Z","modified":"2026-10-17T12:55:34.363182576Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:19.6877Z"},{"id":"CLSA-2026-1778028240","title":"TuxCare security update for org.quartz-scheduler:quartz (1 CVE)","description":"TuxCare rebuilt org.quartz-scheduler:quartz to address 1 CVE. Fixed in 1.8.5-tuxcare.1.","status":"published","published":"2026-08-04T14:52:30Z","modified":"2026-11-02T19:45:28.046287436Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"MGASA-2021-0133","title":"Updated quartz packages fix a security vulnerability","description":"initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz\nScheduler through 2.3.0 allows XXE attacks via a job description\n(CVE-2019-13990).\n","status":"published","published":"2021-03-14T21:20:42Z","modified":"2026-04-16T04:41:28.607549251Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"SUSE-SU-2020:0984-1","title":"Security update for quartz","description":"This update for quartz fixes the following issues:\n\n- CVE-2019-13990: Fixed XML External Entity attack in initDocumentParser (bsc#1143227).\n","status":"published","published":"2020-04-14T08:31:00Z","modified":"2026-02-04T02:42:06.107863Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1009-1","title":"Security update for quartz","description":"This update for quartz fixes the following issues:\n\n- CVE-2019-13990: Fixed XML External Entity attack in initDocumentParser (bsc#1143227).\n","status":"published","published":"2020-04-16T06:32:37Z","modified":"2026-02-04T04:25:20.457988Z","updated_at":"2026-11-02T15:53:47.634847Z"}]}}