● CVE — Medium
CVE-2019-10219
Vendorredhat, oracle, netappProductjboss enterprise application platform, fuse, hibernate validator, access manager, active iq unified manager, agile product lifecycle management, argus safety, application express, single sign-on, application testing suite, agile plm, jboss data grid, agile engineering data management, banking digital experience, element, openshift application runtimes, agile product lifecycle management integration pack, application performance management, banking apis, banking deposits and lines of credit servicing, snapcenter plug-in, airlines data model, argus analytics, argus insight, management services for element software and netapp hci, agile product lifecycle analyticsDiscoveredNov 8, 2019UpdatedAug 25, 2026
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.