{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-24T08:53:35.652","vulnerabilities":[{"cve":{"id":"CVE-2019-10244","sourceIdentifier":"emo@eclipse.org","published":"2019-04-09T16:29:01.587","lastModified":"2026-06-17T02:10:33.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In Eclipse Kura versions up to 4.0.0, the Web UI package and component services, the Artemis simple Mqtt component and the emulator position service (not part of the device distribution) could potentially be target of XXE attack due to an improper factory and parser initialisation."},{"lang":"es","value":"En Eclipse Kura en las versiones anteriores a la 4.0.0, el paquete de interfaz de usuario web y los servicios de componentes, el componente Mqtt simple de Artemis y el servicio de posición de emulador (que no forma parte de la distribución del dispositivo) podrían ser objeto de un ataque XXE debido a una inicialización inadecuada de fábrica del analizador."}],"affected":[{"source":"emo@eclipse.org","affectedData":[{"vendor":"The Eclipse Foundation","product":"Eclipse Kura","versions":[{"version":"unspecified","lessThanOrEqual":"4.0.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"emo@eclipse.org","type":"Secondary","description":[{"lang":"en","value":"CWE-611"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eclipse:kura:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0","matchCriteriaId":"E8694467-C2A3-42A1-8BB7-6D038E2DDA89"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/107844","source":"emo@eclipse.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=545835","source":"emo@eclipse.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/107844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=545835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]}]}}]}