CVE-2019-10086 vulnerability in Apache and Other Products
Published on August 20, 2019
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
NVD
Products Associated with CVE-2019-10086
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-10086 are published in these products:
Affected Versions
Apache Commons Beanutils Version Apache Commons Beanutils 1.0 to 1.9.3 is affected by CVE-2019-10086Exploit Probability
EPSS
0.32%
Percentile
54.39%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.