Skip to content
COOEY

EXPOSURES › CVE-2019-3774

CVE-2019-3774

CRITICAL
DETAIL
SourceNVD · cve Published2019-01-18 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-3774 ↗

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
Broadcom · vendorspring batch · product
DESCRIPTION

Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

SENTIMENT · TRUSTED SOURCES
synthesis neutral +0.00
No coverage found for CVE-2019-3774 in the provided sources; sources contain unrelated CVEs or generic pages.
cooey ↗ neutral +0.00
Neutral; source only restates the NVD fact without commentary.
"Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources."
www.miggo.io ↗ neutral +0.00
Irrelevant; source discusses a different CVE (CVE-2026-73774) and HPE.
NIST ↗ neutral +0.00
Irrelevant; source is a generic NIST NVD homepage.
www.rapid7.com ↗ neutral +0.00
Irrelevant; source discusses a different CVE (CVE-2026-73774) and HPE.
NVD ↗ neutral +0.00
Irrelevant; source is a generic NVD search page.
breach-hq.com ↗ neutral +0.00
Irrelevant; source is a generic BreachHQ homepage.
AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Clarity
Broadcom
 Authorized
General Support Systems (GSS)
Broadcom
 Authorized
Rally
Broadcom
 Authorized
Symantec Gov Cloud Security (GCS)
Broadcom
 In Process