CVE-2019-0189

🗓️ 11 Sep 2019 21:15:10Reported by [email protected]Type

Java deserialization issue in Apache Ofbiz via "webtools/control/httpService" URL CVE-2019-018

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2019-0189	12 Sep 201900:31	–	circl
Check Point Advisories	Apache OFBiz Insecure Deserialization (CVE-2019-0189)	8 Apr 202000:00	–	checkpoint_advisories
CVE	CVE-2019-0189	11 Sep 201920:29	–	cve
Cvelist	CVE-2019-0189	11 Sep 201920:29	–	cvelist
OSV	CVE-2019-0189	11 Sep 201921:15	–	osv
Prion	Deserialization of untrusted data	11 Sep 201921:15	–	prion
RedhatCVE	CVE-2019-0189	22 May 202510:04	–	redhatcve

NVD

Node

apache ofbizRange16.11.01–16.11.06

Source	Link
lists	www.lists.apache.org/thread.html/r11fd9562dbdfc0be95e40518cbef70ab2565129f6f542a870ab82c69%40%3Cnotifications.ofbiz.apache.org%3E
s	www.s.apache.org/hsn2g
lists	www.lists.apache.org/thread.html/rfafb229c0d805c8f2bd232d28cd1297876faf5c953f1d7bcf76eef4f%40%3Ccommits.ofbiz.apache.org%3E
lists	www.lists.apache.org/thread.html/rb0e716837168dc1073fcd76bea644806e5337c247fdb5d8c243d41f8%40%3Ccommits.ofbiz.apache.org%3E
lists	www.lists.apache.org/thread.html/r883840bbb4e2366acd0f6477e86b584000900a270a86587f979a55f9%40%3Ccommits.ofbiz.apache.org%3E
lists	www.lists.apache.org/thread.html/re4623c0fec904882cbbf8cda558f88c1857397fb5c35761bc12a78bd%40%3Cnotifications.ofbiz.apache.org%3E
lists	www.lists.apache.org/thread.html/rf8651e75162819a267384f8a31c20884bc3a9a6707afbf75200cd98d%40%3Ccommits.ofbiz.apache.org%3E
lists	www.lists.apache.org/thread.html/r8f01aab5dd92487c191599def3c950c643d7ad297c4db1d6722ea151%40%3Ccommits.ofbiz.apache.org%3E
lists	www.lists.apache.org/thread.html/986ed5f1a0e209f87ed4a2d348ae5735054f9188912bb2fed7a5543f%40%3Cnotifications.ofbiz.apache.org%3E
lists	www.lists.apache.org/thread.html/7316b4fa811e1ec27604cda3c30560e7389fc6b8c91996c9640fabb8%40%3Cnotifications.ofbiz.apache.org%3E

21 Nov 2024 04:16Current

9.7High risk

Vulners AI Score9.7

CVSS 27.5

CVSS 3.19.8

EPSS0.15419