AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2019-10219.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSMEDIUM / 6.1CVSS 3.1 · nvd@nist.gov
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 08, 2026

Disclosure summary

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Source-reported weakness categories

CWE-79

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2019-10219

Open original source · Updated Oct 08, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
redhathibernate_validator* {"versionEndExcluding":"6.0.18"}
redhathibernate_validator6.1.0
redhathibernate_validator6.1.0
redhathibernate_validator6.1.0
redhathibernate_validator6.1.0
redhathibernate_validator6.1.0
redhathibernate_validator6.1.0
redhatfuse1.0
redhatjboss_data_grid-
redhatjboss_enterprise_application_platform-
redhatopenshift_application_runtimes-
redhatsingle_sign-on-
redhatjboss_enterprise_application_platform7.2
redhatjboss_enterprise_application_platform7.3
netappactive_iq_unified_manager-
netappactive_iq_unified_manager-
netappactive_iq_unified_manager-
netappmanagement_services_for_element_software_and_netapp_hci-
netappsnapcenter_plug-in-
netappelement-
oracleaccess_manager11.1.2.3.0
oracleaccess_manager12.2.1.3.0
oracleaccess_manager12.2.1.4.0
oracleagile_engineering_data_management6.2.1.0
oracleagile_product_lifecycle_analytics3.6.1
oracleagile_product_lifecycle_management9.3.3
oracleagile_product_lifecycle_management9.3.6
oracleagile_product_lifecycle_management_integration_pack3.6
oracleairlines_data_model12.1.1.0.0
oracleairlines_data_model12.2.0.1.0
oracleapplication_express21.1.4
oracleapplication_performance_management13.4.1.0
oracleapplication_performance_management13.5.1.0
oracleapplication_testing_suite13.3.0.1
oracleargus_analytics8.2.1
oracleargus_analytics8.2.2
oracleargus_analytics8.2.3
oracleargus_analytics8.21
oracleargus_insight8.2.1
oracleargus_insight8.2.2
oracleargus_insight8.2.3
oracleargus_safety8.2.1
oracleargus_safety8.2.2
oracleargus_safety8.2.3
oraclebanking_apis18.1
oraclebanking_apis18.2
oraclebanking_apis18.3
oraclebanking_apis19.1
oraclebanking_apis19.2
oraclebanking_apis20.1
oraclebanking_apis21.1
oraclebanking_deposits_and_lines_of_credit_servicing2.12.0
oraclebanking_digital_experience17.2
oraclebanking_digital_experience18.1
oraclebanking_digital_experience18.3
oraclebanking_digital_experience19.1
oraclebanking_digital_experience19.2
oraclebanking_digital_experience20.1
oraclebanking_digital_experience21.1
oraclebanking_enterprise_default_management2.6.2
oraclebanking_enterprise_default_management2.7.0
oraclebanking_enterprise_default_management2.7.1
oraclebanking_enterprise_default_management2.10.0
oraclebanking_enterprise_default_management2.12.0
oraclebanking_enterprise_default_managment* {"versionStartIncluding":"2.3.0","versionEndIncluding":"2.4.0"}
oraclebanking_loans_servicing2.12.0
oraclebanking_party_management2.7.0
oraclebanking_platform* {"versionStartIncluding":"2.3.0","versionEndIncluding":"2.4.1"}
oraclebanking_platform2.6.2
oraclebanking_platform2.7.0
oraclebanking_platform2.7.1
oraclebi_publisher5.5.0.0.0
oraclebi_publisher11.1.1.9.0
oraclebi_publisher12.2.1.3.0
oraclebi_publisher12.2.1.4.0
oraclebig_data_spatial_and_graph23.1
oraclebusiness_activity_monitoring12.2.1.4.0
oraclebusiness_intelligence5.5.0.0.0
oraclebusiness_intelligence5.9.0.0.0
oraclebusiness_intelligence12.2.1.3.0
oraclebusiness_intelligence12.2.1.4.0
oraclebusiness_process_management_suite12.2.1.3.0
oraclebusiness_process_management_suite12.2.1.4.0
oracleclinical5.2.1
oracleclinical5.2.2
oraclecommerce_guided_search11.3.2
oraclecommerce_platform* {"versionStartIncluding":"11.3.0","versionEndIncluding":"11.3.2"}
oraclecommunications_application_session_controller3.9.0
oraclecommunications_billing_and_revenue_management12.0.0.3
oraclecommunications_billing_and_revenue_management12.0.0.4
oraclecommunications_billing_and_revenue_management_elastic_charging_engine11.3
oraclecommunications_billing_and_revenue_management_elastic_charging_engine12.0
oraclecommunications_calendar_server8.0.0.5.0
oraclecommunications_calendar_server8.0.0.6.0
oraclecommunications_cloud_native_core_automated_test_suite1.8.0
oraclecommunications_cloud_native_core_binding_support_function1.9.0
oraclecommunications_cloud_native_core_binding_support_function1.10.0
oraclecommunications_cloud_native_core_console1.7.0
oraclecommunications_cloud_native_core_network_function_cloud_native_environment1.9.0
oraclecommunications_cloud_native_core_network_repository_function1.14.0

Showing 100 associations; open the original for the complete set.

Original records & references

PUBLISHED 2019-11-08T10:15:11-05:00
MODIFIED 2026-10-08T18:16:49-04:00
INGESTED 2026-10-10T20:50:18-04:00