CVE-2019-13990

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-611

Affected software

No affected versions have been published.

Timeline

Published
Jul 26, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-139916.5Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs (directly connected to GPIO pins) via a laser, becCVE-2019-139927.8u'Out of bound memory access if stack push and pop operation are performed without doing a bound check on stack top' in Snapdragon Auto, SnaCVE-2019-139947.8u'Lack of check that the current received data fragment size of a particular packet that are read from shared memory are less than the actuaCVE-2019-139957.8u'Lack of integer overflow check for addition of fragment size and remaining size that are read from shared memory can lead to memory corrupCVE-2019-139987.8u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size results into memory corrupCVE-2019-139997.8u'Lack of check for integer overflow for round up and addition operations result into memory corruption and potential information leakage' iCVE-2019-14005.5An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, akCVE-2019-140007.8Lack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO size results into memory corruption and potentCVE-2019-140017.8Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOTCVE-2019-140027.8APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in Snapdragon Auto, SnaCVE-2019-140037.5Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment information in Snapdragon AuCVE-2019-140049.8Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
CVE-2019-13990: Critical severity, CVSS 9.8 | Vulnix