{"schema_version":"1.7.5","id":"CVE-2019-1559","published":"2019-02-27T23:29:00.277Z","modified":"2026-07-08T15:55:31.186906Z","related":["CGA-gh94-xch9-qggh","SUSE-FU-2022:0445-1","SUSE-SU-2019:0572-1","SUSE-SU-2019:0600-1","SUSE-SU-2019:0658-1","SUSE-SU-2019:0803-1","SUSE-SU-2019:0818-1","SUSE-SU-2019:1362-1","SUSE-SU-2019:14091-1","SUSE-SU-2019:14092-1","SUSE-SU-2019:1553-1","SUSE-SU-2019:1608-1","openSUSE-SU-2019:1105-1","openSUSE-SU-2019:1432-1","openSUSE-SU-2024:11126-1"],"details":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mysql/mysql-server","events":[{"introduced":"0"},{"last_affected":"67b51d50c833a8744fc600e6200175c3d8404d98"},{"last_affected":"3701bd36bec259fe494c75c9b30c57b01e598297"},{"introduced":"270fd3411e3d671a73ed9725940a30080f59ce6d"},{"last_affected":"ca94b993454c86be248fbe180db94647488114e9"}],"database_specific":{"cpe":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"5.6.0"},{"last_affected":"5.6.43"},{"introduced":"5.7.0"},{"last_affected":"5.7.25"},{"introduced":"8.0.0"},{"last_affected":"8.0.15"}],"source":"CPE_RANGE"}}],"versions":["mysql-8.0.15","mysql-8.0.14","mysql-5.6.43","mysql-5.7.25","mysql-5.6.40","mysql-5.1.4","mysql-4.0.4","mysql-4.0.2","mysql-3.23.36","mysql-3.23.33","mysql-3.23.32","mysql-3.23.31","mysql-3.23.30-gamma","mysql-3.23.28-gamma","mysql-3.23.22-beta"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-1559.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/nodejs/node","events":[{"introduced":"ce3e3c5fe15479475c068482c48eb9cbf1ac9df5"},{"last_affected":"c6a397bce63fc026421e1515b98eec9b8b5a8468"},{"introduced":"6b1c40be84fbe5ea404f25e4e340a0c1fe67a60a"},{"fixed":"e6a25300148c32872d6701dfa25c1210797beb4b"},{"introduced":"0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba"},{"last_affected":"dc6bbb44daec5584a0fbd37f0916baeff3202dba"},{"introduced":"f76ce0a75641991bfc235775a4747c978e0e281b"},{"fixed":"783e1e2065f96c74fd8ab8503c14f28f628c4ec0"}],"database_specific":{"cpe":["cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*"],"extracted_events":[{"introduced":"6.0.0"},{"last_affected":"6.8.1"},{"introduced":"6.9.0"},{"fixed":"6.17.0"},{"introduced":"8.0.0"},{"last_affected":"8.8.1"},{"introduced":"8.9.0"},{"fixed":"8.15.1"}],"source":"CPE_RANGE"}}],"versions":["v6.16.0","v8.15.0","v8.14.1","v6.15.1","v6.15.0","v8.14.0","v6.14.4","v8.13.0","v8.12.0","v8.11.4","v8.11.3","v6.14.3","v8.11.2","v6.14.2","v8.11.1","v6.14.1","v6.14.0","v8.11.0","v8.10.0","v6.13.1","v6.13.0","v8.9.4","v6.12.3","v8.9.3","v6.12.2","v8.9.2","v6.12.1","v8.9.1","v6.12.0","v8.9.0","v8.8.1","v6.11.5","v8.8.0","v8.7.0","v6.11.4","v8.6.0","v8.5.0","v6.11.3","v8.4.0","v8.3.0","v6.11.2","v8.2.1","v8.2.0","v8.1.4","v6.11.1","v8.1.3","v8.1.2","v8.1.1","v8.1.0","v6.11.0","v8.0.0","v6.10.3","v6.10.2","v6.10.1","v6.10.0","v6.9.5","v6.9.4","v6.9.3","v6.9.2","v6.9.1","v6.9.0","v6.8.1","v6.8.0","v6.7.0","v6.6.0","v6.5.0","v6.4.0","v6.3.1","v6.3.0","v6.2.2","v6.2.1","v6.2.0","v6.1.0","v6.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-1559.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openssl/openssl","events":[{"introduced":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"fixed":"e818b74be2170fbe957a07b0da4401c2b694b3b8"}],"database_specific":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.2"},{"fixed":"1.0.2r"}],"source":"CPE_RANGE"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-1559.json","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["251633914150035957322733061977107206211","338514574181828579838011565939158652696","76638288692106140328510055542557597351","142922657400765574308962710386922248045","71649992455794854055653842592139575350","65527166711110472566013424527579064967","253196866009476977787139000804413898733","172177136897997206866313011107384691461"],"threshold":0.9},"id":"CVE-2019-1559-e051451f","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8","target":{"file":"crypto/opensslv.h"}}],"vanir_signatures_modified":"2026-07-08T15:55:31Z"}}],"references":[{"type":"WEB","url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/"},{"type":"WEB","url":"https://support.f5.com/csp/article/K18549143?utm_source=f5support&amp%3Butm_medium=RSS"},{"type":"WEB","url":"https://usn.ubuntu.com/4376-2/"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/107174"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2304"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2437"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2439"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2471"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:3929"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:3931"},{"type":"ADVISORY","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10282"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00003.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201903-10"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20190301-0002/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20190423-0002/"},{"type":"ADVISORY","url":"https://support.f5.com/csp/article/K18549143"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3899-1/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2019/dsa-4400"},{"type":"ADVISORY","url":"https://www.openssl.org/news/secadv/20190226.txt"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujan2020.html"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"type":"ADVISORY","url":"https://www.tenable.com/security/tns-2019-03"},{"type":"FIX","url":"https://security.netapp.com/advisory/ntap-20190301-0001/"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"},{"type":"FIX","url":"https://www.tenable.com/security/tns-2019-02"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_access_policy_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_advanced_firewall_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_analytics"},{"cpes":["cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_application_acceleration_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_application_security_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_domain_name_system"},{"cpes":["cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_edge_gateway"},{"cpes":["cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_fraud_protection_service"},{"cpes":["cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_global_traffic_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_link_controller"},{"cpes":["cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_local_traffic_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_policy_enforcement_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_webaccelerator"},{"cpes":["cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0.0"},{"last_affected":"6.1.0"},{"introduced":"7.0.0"},{"last_affected":"7.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-iq_centralized_management"},{"cpes":["cpe:2.3:a:f5:traffix_signaling_delivery_controller:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.0.0"},{"last_affected":"5.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:traffix_signaling_delivery_controller"},{"cpes":["cpe:2.3:a:mcafee:agent:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.6.0"},{"last_affected":"5.6.4"}],"source":"CPE_RANGE","vendor_product":"mcafee:agent"},{"cpes":["cpe:2.3:a:mcafee:data_exchange_layer:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.0.0"},{"fixed":"6.0.0"}],"source":"CPE_RANGE","vendor_product":"mcafee:data_exchange_layer"},{"cpes":["cpe:2.3:a:mcafee:threat_intelligence_exchange_server:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.0.0"},{"fixed":"3.0.0"}],"source":"CPE_RANGE","vendor_product":"mcafee:threat_intelligence_exchange_server"},{"cpes":["cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0.0"},{"fixed":"9.0.0"}],"source":"CPE_RANGE","vendor_product":"mcafee:web_gateway"},{"cpes":["cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*","cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*"],"extracted_events":[{"introduced":"7.3"},{"introduced":"9.5"}],"source":"CPE_RANGE","vendor_product":"netapp:active_iq_unified_manager"},{"cpes":["cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0.0"},{"last_affected":"9.0.4"}],"source":"CPE_RANGE","vendor_product":"netapp:storagegrid"},{"cpes":["cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"4.0.8"},{"introduced":"8.0.0"},{"last_affected":"8.0.14"}],"source":"CPE_RANGE","vendor_product":"oracle:mysql_enterprise_monitor"},{"cpes":["cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"8.0.16"}],"source":"CPE_RANGE","vendor_product":"oracle:mysql_workbench"},{"cpes":["cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.1.0"},{"fixed":"7.1.15"},{"introduced":"8.0.0"},{"fixed":"8.0.20"},{"introduced":"8.1.0"},{"fixed":"8.1.8"},{"introduced":"9.0.0"},{"fixed":"9.0.2"}],"source":"CPE_RANGE","vendor_product":"paloaltonetworks:pan-os"},{"cpes":["cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"8.2.3"}],"source":"CPE_RANGE","vendor_product":"tenable:nessus"},{"cpes":["cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"18.04"},{"last_affected":"18.04"},{"introduced":"18.10"},{"last_affected":"18.10"}],"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux"},{"cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"},{"cpes":["cpe:2.3:a:f5:traffix_signaling_delivery_controller:4.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.4.0"},{"last_affected":"4.4.0"}],"source":"CPE_STRING","vendor_product":"f5:traffix_signaling_delivery_controller"},{"cpes":["cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"29"},{"last_affected":"29"},{"introduced":"30"},{"last_affected":"30"},{"introduced":"31"},{"last_affected":"31"}],"source":"CPE_STRING","vendor_product":"fedoraproject:fedora"},{"cpes":["cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"15.0"},{"last_affected":"15.0"},{"introduced":"15.1"},{"last_affected":"15.1"},{"introduced":"42.3"},{"last_affected":"42.3"}],"source":"CPE_STRING","vendor_product":"opensuse:leap"},{"cpes":["cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.1.2.4.0"},{"last_affected":"11.1.2.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:api_gateway"},{"cpes":["cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*"],"extracted_events":[{"introduced":"11.1.1.9.0"},{"last_affected":"11.1.1.9.0"},{"introduced":"12.2.1.3.0"},{"last_affected":"12.2.1.3.0"},{"introduced":"12.2.1.4.0"},{"last_affected":"12.2.1.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:business_intelligence"},{"cpes":["cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0.0"},{"last_affected":"8.0.0"},{"introduced":"8.1"},{"last_affected":"8.1"},{"introduced":"8.2"},{"last_affected":"8.2"},{"introduced":"8.3"},{"last_affected":"8.3"},{"introduced":"8.4"},{"last_affected":"8.4"}],"source":"CPE_STRING","vendor_product":"oracle:communications_diameter_signaling_router"},{"cpes":["cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.4.0.2"},{"last_affected":"10.4.0.2"}],"source":"CPE_STRING","vendor_product":"oracle:communications_performance_intelligence_center"},{"cpes":["cpe:2.3:a:oracle:communications_session_border_controller:7.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_border_controller:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_border_controller:8.1.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_border_controller:8.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_border_controller:8.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"8.0.0"},{"last_affected":"8.0.0"},{"introduced":"8.1.0"},{"last_affected":"8.1.0"},{"introduced":"8.2"},{"last_affected":"8.2"},{"introduced":"8.3"},{"last_affected":"8.3"}],"source":"CPE_STRING","vendor_product":"oracle:communications_session_border_controller"},{"cpes":["cpe:2.3:a:oracle:communications_session_router:7.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_router:8.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_router:8.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_router:8.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_router:8.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"8.1"},{"last_affected":"8.1"},{"introduced":"8.2"},{"last_affected":"8.2"},{"introduced":"8.3"},{"last_affected":"8.3"}],"source":"CPE_STRING","vendor_product":"oracle:communications_session_router"},{"cpes":["cpe:2.3:a:oracle:communications_unified_session_manager:7.3.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_unified_session_manager:8.2.5:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.3.5"},{"last_affected":"7.3.5"},{"introduced":"8.2.5"},{"last_affected":"8.2.5"}],"source":"CPE_STRING","vendor_product":"oracle:communications_unified_session_manager"},{"cpes":["cpe:2.3:a:oracle:endeca_server:7.7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.7.0"},{"last_affected":"7.7.0"}],"source":"CPE_STRING","vendor_product":"oracle:endeca_server"},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0.5.0"},{"last_affected":"12.1.0.5.0"},{"introduced":"13.2.0.0.0"},{"last_affected":"13.2.0.0.0"},{"introduced":"13.3.0.0.0"},{"last_affected":"13.3.0.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_base_platform"},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.3.3"},{"last_affected":"12.3.3"},{"introduced":"12.4.0"},{"last_affected":"12.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_ops_center"},{"cpes":["cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.2"},{"last_affected":"9.2"}],"source":"CPE_STRING","vendor_product":"oracle:jd_edwards_enterpriseone_tools"},{"cpes":["cpe:2.3:a:oracle:jd_edwards_world_security:a9.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jd_edwards_world_security:a9.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"a9.3"},{"last_affected":"a9.3"},{"introduced":"a9.3.1"},{"last_affected":"a9.3.1"},{"introduced":"a9.4"},{"last_affected":"a9.4"}],"source":"CPE_STRING","vendor_product":"oracle:jd_edwards_world_security"},{"cpes":["cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.55"},{"last_affected":"8.55"},{"introduced":"8.56"},{"last_affected":"8.56"},{"introduced":"8.57"},{"last_affected":"8.57"}],"source":"CPE_STRING","vendor_product":"oracle:peoplesoft_enterprise_peopletools"},{"cpes":["cpe:2.3:a:oracle:secure_global_desktop:5.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.4"},{"last_affected":"5.4"}],"source":"CPE_STRING","vendor_product":"oracle:secure_global_desktop"},{"cpes":["cpe:2.3:a:oracle:services_tools_bundle:19.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"19.2"},{"last_affected":"19.2"}],"source":"CPE_STRING","vendor_product":"oracle:services_tools_bundle"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_desktop"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_workstation"},{"cpes":["cpe:2.3:a:redhat:jboss_enterprise_web_server:5.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.0.0"},{"last_affected":"5.0.0"}],"source":"CPE_STRING","vendor_product":"redhat:jboss_enterprise_web_server"},{"cpes":["cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.0"},{"last_affected":"4.0"}],"source":"CPE_STRING","vendor_product":"redhat:virtualization"},{"cpes":["cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.0"},{"last_affected":"4.0"}],"source":"CPE_STRING","vendor_product":"redhat:virtualization_host"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}