[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXRM_pO38q-9RCyvEKEjLDa_PMvpa185z9umWdQxWQMQ":3,"g5a-risk:CVE-2019-12419":201},{"success":4,"data":5,"meta":199},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":68,"references":69,"referencesCount":117,"weaknesses":118,"weaknessesCount":127,"isActivelyExploited":128,"cisaInfo":27,"otxData":27,"relatedBlogPosts":129,"seoMetadata":130,"configurations":155,"relatedVendorCves":183,"notableEvents":184},"CVE-2019-12419","What is CVE-2019-12419?","Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token services, where it does not validate that the authenticated principal is equal to that of the supplied clientId parameter in the request. If a malicious client was able to somehow steal an authorization code issued to another client, then they could exploit this vulnerability to obtain an access token for the other client.","Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability...","2019-11-06T21:15:11.243","2023-11-07T03:03:34.597",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.13836,[39,39,39,39,39,39,39],"Critical",[43,48,53,57,61,64],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"apache","cxf","*","cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"oracle","commerce_guided_search","11.3.2","cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",{"vendor":49,"product":54,"version":55,"criteria":56,"vulnerable":4},"enterprise_manager_base_platform","13.2.1.0","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.1.0:*:*:*:*:*:*:*",{"vendor":49,"product":58,"version":59,"criteria":60,"vulnerable":4},"flexcube_private_banking","12.0.0","cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*",{"vendor":49,"product":58,"version":62,"criteria":63,"vulnerable":4},"12.1.0","cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*",{"vendor":49,"product":65,"version":66,"criteria":67,"vulnerable":4},"retail_order_broker","15.0","cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*",6,[70,75,78,81,84,87,90,93,96,99,102,108,111,114],{"url":71,"source":72,"tags":73},"http:\u002F\u002Fcxf.apache.org\u002Fsecurity-advisories.data\u002FCVE-2019-12419.txt.asc","Apache",[74],"Vendor Advisory",{"url":76,"source":72,"tags":77},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",[],{"url":79,"source":72,"tags":80},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr861eb1a9e0250e9150215b17f0263edf62becd5e20fc96251cff59f6%40%3Cdev.cxf.apache.org%3E",[],{"url":82,"source":72,"tags":83},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",[],{"url":85,"source":72,"tags":86},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",[],{"url":88,"source":72,"tags":89},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fre7593a274ee0a85d304d5d42c66fc0081c94d7f22bc96a1084d43b80%40%3Cdev.cxf.apache.org%3E",[],{"url":91,"source":72,"tags":92},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",[],{"url":94,"source":72,"tags":95},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Free5fc719e330f82ae38a2b0050c91f18ed5b878312dc0b9e0b9815be%40%3Cdev.cxf.apache.org%3E",[],{"url":97,"source":72,"tags":98},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",[],{"url":100,"source":72,"tags":101},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",[],{"url":103,"source":104,"tags":105},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002FcpuApr2021.html","Oracle",[106,107],"Patch","Third Party Advisory",{"url":109,"source":104,"tags":110},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuapr2020.html",[106,107],{"url":112,"source":104,"tags":113},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2020.html",[106,107],{"url":115,"source":104,"tags":116},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuoct2020.html",[106,107],14,[119],{"id":120,"name":121,"description":122,"extendedDescription":123,"status":124,"abstraction":125,"structure":126},"CWE-863","Incorrect Authorization","The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are incorrectly applied, users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Incomplete","Class","Simple",1,false,[],{"title":131,"metaDescription":132,"keywords":133,"canonicalUrl":134,"structuredData":135},"What is CVE-2019-12419? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-12419, a critical severity cyber security vulnerability from 2019. Apache CXF before 3.3.4 and 3.2.11 provides all of the ...","CVE-2019-12419, CVE-2019-12419 vulnerability, CVE-2019-12419 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, apache security, oracle security, cxf vulnerability, commerce_guided_search vulnerability, enterprise_manager_base_platform vulnerability, flexcube_private_banking vulnerability, retail_order_broker vulnerability","\u002Fwhat-is\u002Fcve-2019-12419",{"@context":136,"@type":137,"headline":131,"description":132,"datePublished":10,"dateModified":11,"author":138,"publisher":142,"about":146,"mainEntityOfPage":150,"articleSection":153,"keywords":154},"https:\u002F\u002Fschema.org","TechArticle",{"@type":139,"name":140,"url":141},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":139,"name":140,"url":141,"logo":143},{"@type":144,"url":145},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":147,"name":6,"description":148,"additionalType":149},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":151,"@id":152},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-12419","Cybersecurity","CVE-2019-12419, CVE-2019-12419 vulnerability, CVE-2019-12419 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[156,169],{"Operator":27,"Negate":27,"Nodes":157},[158],{"Operator":159,"Negate":27,"CPEMatch":160},"OR",[161,165],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":163,"VersionEndExcluding":164,"VersionEndIncluding":27},"CF57DEBE-707E-45AF-98F7-4C479FC54A2E","3.2.0","3.2.11",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":166,"VersionStartExcluding":27,"VersionStartIncluding":167,"VersionEndExcluding":168,"VersionEndIncluding":27},"89D8D43C-17FA-48FC-9167-ED8F056BD8FC","3.3.0","3.3.4",{"Operator":27,"Negate":27,"Nodes":170},[171],{"Operator":159,"Negate":27,"CPEMatch":172},[173,175,177,179,181],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":174,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2A3622F5-5976-4BBC-A147-FC8A6431EA79",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":176,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"66916DEB-ACE1-44E0-9535-10B3E03347AC",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":178,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6762F207-93C7-4363-B2F9-7A7C6F8AF993",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":180,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"1B74B912-152D-4F38-9FC1-741D6D0B27FC",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":182,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EE8CF045-09BB-4069-BCEC-496D5AE3B780",[],[185,192],{"id":186,"eventType":187,"eventTime":188,"details":189,"label":190,"color":191},"719d2587-1a23-4f41-9d3d-7abb74fc8fdc","LOW_EPSS_DELTA","2025-07-02T04:11:52.050192+00:00","Daily EPSS score decreased by 0.128 on 2023-12-30","EPSS Score Decreased","green",{"id":193,"eventType":194,"eventTime":195,"details":196,"label":197,"color":198},"c1b24249-29a7-4cae-a792-fb5688f77bf5","HIGH_EPSS_DELTA","2025-07-06T04:05:49.372638+00:00","Daily EPSS score increased by 0.128 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":200,"version":33},1792248366197,{"score":202,"band":203,"action":204,"scoredAt":205},55,"Medium","Plan remediation","2026-10-16T06:47:12.619748+00:00"]