CVE-2019-10219: Netapp Active Iq Unified Manager

Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days.

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Affected products

Netapp Active Iq Unified Manager: affected versions not specified
Netapp Element: affected versions not specified
Netapp Management Services For Element Software And Netapp Hci: affected versions not specified
Netapp Snapcenter Plug-In: affected versions not specified
Oracle Access Manager: version 11.1.2.3.0 only; version 12.2.1.3.0 only; version 12.2.1.4.0 only
Oracle Agile Engineering Data Management: version 6.2.1.0 only
Oracle Agile Product Lifecycle Analytics: version 3.6.1 only
Oracle Agile Product Lifecycle Management: version 9.3.3 only; version 9.3.6 only
Oracle Agile Product Lifecycle Management Integration Pack: version 3.6 only
Oracle Airlines Data Model: version 12.1.1.0.0 only; version 12.2.0.1.0 only
Oracle Application Express: version 21.1.4 only
Oracle Application Performance Management: version 13.4.1.0 only; version 13.5.1.0 only
Oracle Application Testing Suite: version 13.3.0.1 only
Oracle Argus Analytics: version 8.2.1 only; version 8.2.2 only; version 8.2.3 only; version 8.21 only
Oracle Argus Insight: version 8.2.1 only; version 8.2.2 only; version 8.2.3 only
Oracle Argus Safety: version 8.2.1 only; version 8.2.2 only; version 8.2.3 only
Oracle Banking Apis: version 18.1 only; version 18.2 only; version 18.3 only; version 19.1 only; version 19.2 only; version 20.1 only; …
Oracle Banking Deposits And Lines Of Credit Servicing: version 2.12.0 only
Oracle Banking Digital Experience: version 17.2 only; version 18.1 only; version 18.3 only; version 19.1 only; version 19.2 only; version 20.1 only; …
Oracle Banking Enterprise Default Management: version 2.6.2 only; version 2.7.0 only; version 2.7.1 only; version 2.10.0 only; version 2.12.0 only
Oracle Banking Enterprise Default Managment: from 2.3.0, up to and including 2.4.0
Oracle Banking Loans Servicing: version 2.12.0 only
Oracle Banking Party Management: version 2.7.0 only
Oracle Banking Platform: from 2.3.0, up to and including 2.4.1; version 2.6.2 only; version 2.7.0 only; version 2.7.1 only
Oracle BI Publisher: version 5.5.0.0.0 only; version 11.1.1.9.0 only; version 12.2.1.3.0 only; version 12.2.1.4.0 only
and 162 more

Published 2019-11-08. Last modified 2026-10-08.