CRITICAL🇵🇱 Wersja polska

CVE-2019-17195

CVSS 9.8v3.1pub. 2019-10-15upd. 2024-11-21

Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Apache Hadoop
APP
Apache
3.2.1
Connect2id Nimbus Jose\+jwt
APP
Connect2Id
< 7.9
Oracle Communications Cloud Native Core Security Edge Protection Proxy
APP
Oracle
1.7.0
Oracle Communications Pricing Design Center
APP
Oracle
12.0.0.3.0
Oracle Data Integrator
APP
Oracle
12.2.1.4.0
Oracle Enterprise Manager Base Platform
APP
Oracle
13.4.0.0
Oracle Healthcare Data Repository
APP
Oracle
8.1.0
Oracle Insurance Policy Administration
APP
Oracle
11.0 – 11.3.1
Oracle Jd Edwards Enterpriseone Orchestrator
APP
Oracle
≤ 9.2.5.3
Oracle Jd Edwards Enterpriseone Tools
APP
Oracle
≤ 9.2.5.3
Oracle Peoplesoft Enterprise Peopletools
APP
Oracle
8.588.59
Oracle Policy Automation
APP
Oracle
12.2.0 – 12.2.22
Oracle Primavera Gateway
APP
Oracle
19.12.018.8.0 – 18.8.11
Oracle Solaris Cluster
APP
Oracle
4.0
Oracle Weblogic Server
APP
Oracle
12.2.1.3.012.2.1.4.0