Vendor/product archive

softwareag / quartz CVEs

Beta · best-effort

2 CVEs tagged to softwareag / quartz — 2 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to softwareag vendor archive

CVE-2023-39017

Published Jul 28, 2023

quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component org.quartz.jobs.ee.jms.SendQueueMessageJob.execute. This vulnerability is exp…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2019-13990

Published Jul 26, 2019

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1