Search for packages
| purl | pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.quartz@1.8.6_1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2019-13990
|
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description. | There are no reported fixed by versions. |