[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhX4amrZDCBJQKNfSMZdyGbukJfwbsyBuEfWhRvNryyI":3,"g5a-risk:CVE-2019-5427":262},{"success":4,"data":5,"meta":260},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":26,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":115,"references":116,"referencesCount":164,"weaknesses":165,"weaknessesCount":174,"isActivelyExploited":41,"cisaInfo":26,"otxData":26,"relatedBlogPosts":175,"seoMetadata":176,"configurations":201,"relatedVendorCves":258,"notableEvents":259},"CVE-2019-5427","What is CVE-2019-5427?","c3p0 version \u003C 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.","c3p0 version \u003C 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansi...","2019-04-22T21:29:00.523","2025-09-05T17:23:58.51",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[],[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":38,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":41,"ObtainAllPrivilege":41,"ObtainUserPrivilege":41,"ObtainOtherPrivilege":41,"UserInteractionRequired":41},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":37,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"","MEDIUM",10,2.9,false,0.04882,[42,42,42,42,42,42,42],"High",[46,51,56,59,64,67,70,73,77,81,85,88,92,96,99,102,105,108,112],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"mchange","c3p0","*","cpe:2.3:a:mchange:c3p0:*:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"fedoraproject","fedora","29","cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":57,"criteria":58,"vulnerable":4},"30","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":62,"criteria":63,"vulnerable":4},"oracle","communications_ip_service_activator","7.3.0","cpe:2.3:a:oracle:communications_ip_service_activator:7.3.0:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":65,"criteria":66,"vulnerable":4},"7.4.0","cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:*",{"vendor":60,"product":68,"version":49,"criteria":69,"vulnerable":4},"communications_session_route_manager","cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*",{"vendor":60,"product":71,"version":49,"criteria":72,"vulnerable":4},"documaker","cpe:2.3:a:oracle:documaker:*:*:*:*:*:*:*:*",{"vendor":60,"product":74,"version":75,"criteria":76,"vulnerable":4},"enterprise_manager_base_platform","13.2.1.0","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.1.0:*:*:*:*:*:*:*",{"vendor":60,"product":78,"version":79,"criteria":80,"vulnerable":4},"enterprise_manager_ops_center","12.4.0.0","cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",{"vendor":60,"product":82,"version":83,"criteria":84,"vulnerable":4},"flexcube_private_banking","12.0.0","cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*",{"vendor":60,"product":82,"version":86,"criteria":87,"vulnerable":4},"12.1.0","cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*",{"vendor":60,"product":89,"version":90,"criteria":91,"vulnerable":4},"hyperion_infrastructure_technology","11.1.2.4","cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*",{"vendor":60,"product":93,"version":94,"criteria":95,"vulnerable":4},"retail_xstore_point_of_service","15.0","cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*",{"vendor":60,"product":93,"version":97,"criteria":98,"vulnerable":4},"16.0","cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:*",{"vendor":60,"product":93,"version":100,"criteria":101,"vulnerable":4},"17.0","cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:*",{"vendor":60,"product":93,"version":103,"criteria":104,"vulnerable":4},"18.0","cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0:*:*:*:*:*:*:*",{"vendor":60,"product":93,"version":106,"criteria":107,"vulnerable":4},"19.0","cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0:*:*:*:*:*:*:*",{"vendor":60,"product":109,"version":110,"criteria":111,"vulnerable":4},"webcenter_sites","12.2.1.3.0","cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*",{"vendor":60,"product":109,"version":113,"criteria":114,"vulnerable":4},"12.2.1.4.0","cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:*",19,[117,125,129,132,136,139,142,145,148,150,152,154,156,158,160,162],{"url":118,"source":119,"tags":120},"https:\u002F\u002Fhackerone.com\u002Freports\u002F509315","Hackerone",[121,122,123,124],"Exploit","Issue Tracking","Patch","Third Party Advisory",{"url":126,"source":127,"tags":128},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FBFIVX6HOVNLAM7W3SUAMHYRNLCVQSAWR\u002F","Fedoraproject",[124],{"url":130,"source":127,"tags":131},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FMQ47OFV57Y2DAHMGA5H3JOL4WHRWRFN4\u002F",[124],{"url":133,"source":134,"tags":135},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuapr2020.html","Oracle",[124],{"url":137,"source":134,"tags":138},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2021.html",[124],{"url":140,"source":134,"tags":141},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2020.html",[124],{"url":143,"source":134,"tags":144},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuoct2020.html",[124],{"url":146,"source":134,"tags":147},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuoct2021.html",[124],{"url":118,"source":119,"tags":149},[121,122,123,124],{"url":126,"source":127,"tags":151},[124],{"url":130,"source":127,"tags":153},[124],{"url":133,"source":134,"tags":155},[124],{"url":137,"source":134,"tags":157},[124],{"url":140,"source":134,"tags":159},[124],{"url":143,"source":134,"tags":161},[124],{"url":146,"source":134,"tags":163},[124],16,[166],{"id":167,"name":168,"description":169,"extendedDescription":170,"status":171,"abstraction":172,"structure":173},"CWE-776","Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')","The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.","If the DTD contains a large number of nested or recursive entities, this can lead to explosive growth of data when parsed, causing a denial of service.","Draft","Base","Simple",1,[],{"title":177,"metaDescription":178,"keywords":179,"canonicalUrl":180,"structuredData":181},"What is CVE-2019-5427? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-5427, a high severity cyber security vulnerability from 2019. c3p0 version \u003C 0.9.5.4 may be exploited by a billion laughs ...","CVE-2019-5427, CVE-2019-5427 vulnerability, CVE-2019-5427 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, mchange security, fedoraproject security, oracle security, c3p0 vulnerability, fedora vulnerability, communications_ip_service_activator vulnerability, communications_session_route_manager vulnerability, documaker vulnerability","\u002Fwhat-is\u002Fcve-2019-5427",{"@context":182,"@type":183,"headline":177,"description":178,"datePublished":10,"dateModified":11,"author":184,"publisher":188,"about":192,"mainEntityOfPage":196,"articleSection":199,"keywords":200},"https:\u002F\u002Fschema.org","TechArticle",{"@type":185,"name":186,"url":187},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":185,"name":186,"url":187,"logo":189},{"@type":190,"url":191},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":193,"name":6,"description":194,"additionalType":195},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":197,"@id":198},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-5427","Cybersecurity","CVE-2019-5427, CVE-2019-5427 vulnerability, CVE-2019-5427 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[202,210,218],{"Operator":26,"Negate":26,"Nodes":203},[204],{"Operator":205,"Negate":41,"CPEMatch":206},"OR",[207],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":208,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":209,"VersionEndIncluding":26},"FECD9981-2017-4DA4-951A-55C01C749FCF","0.9.5.4",{"Operator":26,"Negate":26,"Nodes":211},[212],{"Operator":205,"Negate":41,"CPEMatch":213},[214,216],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":215,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D100F7CE-FC64-4CC6-852A-6136D72DA419",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":217,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3",{"Operator":26,"Negate":26,"Nodes":219},[220],{"Operator":205,"Negate":41,"CPEMatch":221},[222,224,226,230,234,236,238,240,242,244,246,248,250,252,254,256],{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":223,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DE48E0FE-5931-441C-B4FF-253BD9C48186",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":225,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DE7A60DB-A287-4E61-8131-B6314007191B",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":227,"VersionStartExcluding":26,"VersionStartIncluding":228,"VersionEndExcluding":26,"VersionEndIncluding":229},"11B0C37E-D7C7-45F2-A8D8-5A3B1B191430","8.2.0","8.2.2",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":231,"VersionStartExcluding":26,"VersionStartIncluding":232,"VersionEndExcluding":26,"VersionEndIncluding":233},"0A3136AE-8744-4B13-BCA3-9FDD9E71DF02","12.6.0","12.6.6",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":235,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"66916DEB-ACE1-44E0-9535-10B3E03347AC",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":237,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B095CC03-7077-4A58-AB25-CC5380CDCE5A",{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":239,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6762F207-93C7-4363-B2F9-7A7C6F8AF993",{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":241,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1B74B912-152D-4F38-9FC1-741D6D0B27FC",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":243,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DED59B62-C9BF-4C0E-B351-3884E8441655",{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":245,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"11DA6839-849D-4CEF-85F3-38FE75E07183",{"Vulnerable":4,"Criteria":98,"MatchCriteriaID":247,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BCE78490-A4BE-40BD-8C72-0A4526BBD4A4",{"Vulnerable":4,"Criteria":101,"MatchCriteriaID":249,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"55AE3629-4A66-49E4-A33D-6D81CC94962F",{"Vulnerable":4,"Criteria":104,"MatchCriteriaID":251,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4CB39A1A-AD29-45DD-9EB5-5E2053A01B9A",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":253,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"27C26705-6D1F-4D5E-B64D-B479108154FF",{"Vulnerable":4,"Criteria":111,"MatchCriteriaID":255,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D551CAB1-4312-44AA-BDA8-A030817E153A",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":257,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"174A6D2E-E42E-4C92-A194-C6A820CD7EF4",[],[],{"lastModified":11,"cacheTime":261,"version":33},1792248193307,{"score":263,"band":264,"action":265,"scoredAt":266},47,"Medium","Plan remediation","2026-10-16T06:46:00.246761+00:00"]