https://access.redhat.com/errata/RHSA-2020:0159

https://access.redhat.com/errata/RHSA-2020:0160

https://access.redhat.com/errata/RHSA-2020:0161

https://access.redhat.com/errata/RHSA-2020:0164

https://access.redhat.com/errata/RHSA-2020:0445

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10219

https://lists.apache.org/thread.html/r4f8b4e2541be4234946e40d55859273a7eec0f4901e8080ce2406fe6%40%3Cnotifications.accumulo.apache.org%3E

https://lists.apache.org/thread.html/r4f92d7f7682dcff92722fa947f9e6f8ba2227c5dc3e11ba09114897d%40%3Cnotifications.accumulo.apache.org%3E

https://lists.apache.org/thread.html/r87b7e2d22982b4ca9f88f5f4f22a19b394d2662415b233582ed22ebf%40%3Cnotifications.accumulo.apache.org%3E

https://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4%40%3Cpluto-scm.portals.apache.org%3E

https://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c%40%3Cpluto-dev.portals.apache.org%3E

https://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a%40%3Cpluto-dev.portals.apache.org%3E

https://security.netapp.com/advisory/ntap-20220210-0024/

https://www.oracle.com/security-alerts/cpujan2022.html

Red Hat, Inc. https://lists.apache.org/thread.html/r4f8b4e2541be4234946e40d55859273a7eec0f4901e8080ce2406fe6%40%3Cnotifications.accumulo.apache.org%3E [No types assigned]

Red Hat, Inc. https://lists.apache.org/thread.html/r4f92d7f7682dcff92722fa947f9e6f8ba2227c5dc3e11ba09114897d%40%3Cnotifications.accumulo.apache.org%3E [No types assigned]

Red Hat, Inc. https://lists.apache.org/thread.html/r87b7e2d22982b4ca9f88f5f4f22a19b394d2662415b233582ed22ebf%40%3Cnotifications.accumulo.apache.org%3E [No types assigned]

Red Hat, Inc. https://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4%40%3Cpluto-scm.portals.apache.org%3E [No types assigned]

Red Hat, Inc. https://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c%40%3Cpluto-dev.portals.apache.org%3E [No types assigned]

Red Hat, Inc. https://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a%40%3Cpluto-dev.portals.apache.org%3E [No types assigned]

Red Hat, Inc. https://lists.apache.org/thread.html/r4f8b4e2541be4234946e40d55859273a7eec0f4901e8080ce2406fe6@%3Cnotifications.accumulo.apache.org%3E

Red Hat, Inc. https://lists.apache.org/thread.html/r4f92d7f7682dcff92722fa947f9e6f8ba2227c5dc3e11ba09114897d@%3Cnotifications.accumulo.apache.org%3E

Red Hat, Inc. https://lists.apache.org/thread.html/r87b7e2d22982b4ca9f88f5f4f22a19b394d2662415b233582ed22ebf@%3Cnotifications.accumulo.apache.org%3E

Red Hat, Inc. https://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4@%3Cpluto-scm.portals.apache.org%3E

Red Hat, Inc. https://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c@%3Cpluto-dev.portals.apache.org%3E

Red Hat, Inc. https://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a@%3Cpluto-dev.portals.apache.org%3E

OR
     *cpe:2.3:a:oracle:banking_enterprise_default_managment:2.6.2:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:banking_enterprise_default_management:2.6.2:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:banking_enterprise_default_managment:2.7.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:banking_enterprise_default_managment:2.7.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:banking_enterprise_default_managment:2.10.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:banking_enterprise_default_managment:2.12.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:banking_deposit_and_lines_of_credit_servicing:2.12.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:banking_deposits_and_lines_of_credit_servicing:2.12.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:java_se:11.0.13:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:jdk:11.0.13:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2:*:*:*:*:*:*:*
          *cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3:*:*:*:*:*:*:*
          *cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.4:*:*:*:*:*:*:*
     OR
          cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
          cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
          cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:redhat:fuse:1.0:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:jboss_data_grid:-:*:*:*:text-only:*:*:*
     *cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:*
     *cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:text-only:*:*:*
     *cpe:2.3:a:redhat:single_sign-on:-:*:*:*:text-only:*:*:*

AND
     OR
          *cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2:*:*:*:*:*:*:*
          *cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3:*:*:*:*:*:*:*
     OR
          cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:oracle:fujitsu_m10-1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:oracle:fujitsu_m10-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:oracle:fujitsu_m10-4_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:oracle:fujitsu_m10-4:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:oracle:fujitsu_m10-4s_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:oracle:fujitsu_m10-4s:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:oracle:fujitsu_m12-1_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:oracle:fujitsu_m12-1:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:oracle:fujitsu_m12-2_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:oracle:fujitsu_m12-2:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:oracle:fujitsu_m12-2s_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:oracle:fujitsu_m12-2s:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*
     *cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
     *cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
     *cpe:2.3:a:netapp:management_services_for_element_software_and_netapp_hci:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:snapcenter_plug-in:-:*:*:*:*:vmware_vsphere:*:*
     *cpe:2.3:o:netapp:element:-:*:*:*:*:vcenter_server:*:*

OR
     *cpe:2.3:a:oracle:access_manager:11.1.2.3.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:access_manager:12.2.1.3.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:access_manager:12.2.1.4.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:agile_product_lifecycle_analytics:3.6.1:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:agile_product_lifecycle

https://security.netapp.com/advisory/ntap-20220210-0024/ No Types Assigned

https://security.netapp.com/advisory/ntap-20220210-0024/ Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html No Types Assigned

https://www.oracle.com/security-alerts/cpujan2022.html Third Party Advisory

https://security.netapp.com/advisory/ntap-20220210-0024/ [No Types Assigned]

https://www.oracle.com/security-alerts/cpujan2022.html [No Types Assigned]

OR
     *cpe:2.3:a:hibernate:hibernate-validator:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.18
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha1:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha2:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha3:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha4:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha5:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:

OR
     *cpe:2.3:a:redhat:hibernate_validator:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.18
     *cpe:2.3:a:redhat:hibernate_validator:6.1.0:alpha1:*:*:*:*:*:*
     *cpe:2.3:a:redhat:hibernate_validator:6.1.0:alpha2:*:*:*:*:*:*
     *cpe:2.3:a:redhat:hibernate_validator:6.1.0:alpha3:*:*:*:*:*:*
     *cpe:2.3:a:redhat:hibernate_validator:6.1.0:alpha4:*:*:*:*:*:*
     *cpe:2.3:a:redhat:hibernate_validator:6.1.0:alpha5:*:*:*:*:*:*
     *cpe:2.3:a:redhat:hibernate_validator:6.1.0:alpha6:*:*:*:*:

OR
     *cpe:2.3:a:hibernate:hibernate-validator:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.18
     *cpe:2.3:a:hibernate:hibernate-validator:*:*:*:*:*:*:*:* versions from (including) 6.0.19 up to (including) 6.0.22
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha1:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha2:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha3:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha4:*:*:*:*:*

OR
     *cpe:2.3:a:hibernate:hibernate-validator:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.18
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha1:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha2:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha3:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha4:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha5:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:

OR
     *cpe:2.3:a:redhat:jboss_data_grid:7.0:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2:*:*:*:*:*:*:*
          *cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3:*:*:*:*:*:*:*
          *cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.4:*:*:*:*:*:*:*
     OR
          cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
          cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
          cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:hibernate:hibernate-validator:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:hibernate:hibernate-validator:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.18
     *cpe:2.3:a:hibernate:hibernate-validator:*:*:*:*:*:*:*:* versions from (including) 6.0.19 up to (including) 6.0.22
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha1:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha2:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha3:*:*:*:*:*:*
     *cpe:2.3:a:hibernate:hibernate-validator:6.1.0:alpha4:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2020:0159 No Types Assigned

https://access.redhat.com/errata/RHSA-2020:0159 Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0160 No Types Assigned

https://access.redhat.com/errata/RHSA-2020:0160 Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0161 No Types Assigned

https://access.redhat.com/errata/RHSA-2020:0161 Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0164 No Types Assigned

https://access.redhat.com/errata/RHSA-2020:0164 Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0445 No Types Assigned

https://access.redhat.com/errata/RHSA-2020:0445 Third Party Advisory

https://lists.apache.org/thread.html/r4f8b4e2541be4234946e40d55859273a7eec0f4901e8080ce2406fe6@%3Cnotifications.accumulo.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r4f8b4e2541be4234946e40d55859273a7eec0f4901e8080ce2406fe6@%3Cnotifications.accumulo.apache.org%3E Mailing List, Third Party Advisory

https://lists.apache.org/thread.html/r4f92d7f7682dcff92722fa947f9e6f8ba2227c5dc3e11ba09114897d@%3Cnotifications.accumulo.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r4f92d7f7682dcff92722fa947f9e6f8ba2227c5dc3e11ba09114897d@%3Cnotifications.accumulo.apache.org%3E Mailing List, Third Party Advisory

https://lists.apache.org/thread.html/r87b7e2d22982b4ca9f88f5f4f22a19b394d2662415b233582ed22ebf@%3Cnotifications.accumulo.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r87b7e2d22982b4ca9f88f5f4f22a19b394d2662415b233582ed22ebf@%3Cnotifications.accumulo.apache.org%3E Mailing List, Third Party Advisory

https://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4@%3Cpluto-scm.portals.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4@%3Cpluto-scm.portals.apache.org%3E Mailing List, Third Party Advisory

https://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c@%3Cpluto-dev.portals.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c@%3Cpluto-dev.portals.apache.org%3E Mailing List, Third Party Advisory

https://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a@%3Cpluto-dev.portals.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a@%3Cpluto-dev.portals.apache.org%3E Mailing List, Third Party Advisory

https://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4@%3Cpluto-scm.portals.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c@%3Cpluto-dev.portals.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a@%3Cpluto-dev.portals.apache.org%3E [No Types Assigned]

https://access.redhat.com/errata/RHSA-2020:0445 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2020:0159 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2020:0160 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2020:0161 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2020:0164 [No Types Assigned]

https://lists.apache.org/thread.html/r4f8b4e2541be4234946e40d55859273a7eec0f4901e8080ce2406fe6@%3Cnotifications.accumulo.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/r4f92d7f7682dcff92722fa947f9e6f8ba2227c5dc3e11ba09114897d@%3Cnotifications.accumulo.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/r87b7e2d22982b4ca9f88f5f4f22a19b394d2662415b233582ed22ebf@%3Cnotifications.accumulo.apache.org%3E [No Types Assigned]

NIST AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NIST (AV:N/AC:M/Au:N/C:N/I:P/A:N)

NIST CWE-79

OR
     *cpe:2.3:a:hibernate:hibernate-validator:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:redhat:jboss_data_grid:7.0:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10219 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10219 Issue Tracking, Third Party Advisory

Victim must voluntarily interact with attack mechanism