A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade jakarta-commons-httpclientUpgrade velocityUpgrade jackson-module-jaxb-annotationsUpgrade apache-commons-collectionsUpgrade slf4j-jdk14Upgrade relaxngDatatypeUpgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-providersUpgrade jackson-annotationsUpgrade python-nss-docUpgrade javassistUpgrade xsomUpgrade slf4jUpgrade glassfish-fastinfosetUpgrade stax-exUpgrade xml-commons-resolverUpgrade xerces-j2Upgrade xml-commons-apisUpgrade jackson-databindUpgrade xalan-j2Upgrade jackson-coreUpgrade bea-stax-apiUpgrade python3-nssUpgrade javassist-javadocUpgrade apache-commons-langUpgrade glassfish-jaxb-runtimeUpgrade glassfish-jaxb-coreUpgrade xmlstreambufferUpgrade glassfish-jaxb-txw2Upgrade jackson-jaxrs-json-provider | May 4, 2022 | Sep 15, 2019 |
| Centos_linux | — | Upgrade jackson-jaxrs-json-providerUpgrade pki-base-javaUpgrade stax-exUpgrade python3-pkiUpgrade glassfish-jaxb-txw2Upgrade slf4j-jdk14Upgrade pki-core-debugsourceUpgrade xml-commons-apisUpgrade apache-commons-langUpgrade ldapjdkUpgrade glassfish-jaxb-apiUpgrade pki-tools-debuginfoUpgrade xmlstreambufferUpgrade velocityUpgrade bea-stax-apiUpgrade pki-baseUpgrade resteasyUpgrade jackson-databindUpgrade jss-javadocUpgrade jackson-module-jaxb-annotationsUpgrade tomcatjssUpgrade glassfish-fastinfosetUpgrade jackson-coreUpgrade pki-core-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade xml-commons-resolverUpgrade xerces-j2Upgrade javassist-javadocUpgrade slf4jUpgrade xalan-j2Upgrade jackson-annotationsUpgrade glassfish-jaxb-coreUpgrade pki-kraUpgrade jss-debugsourceUpgrade ldapjdk-javadocUpgrade pki-servlet-4.0-apiUpgrade apache-commons-collectionsUpgrade jss-debuginfoUpgrade relaxngDatatypeUpgrade pki-symkeyUpgrade jackson-jaxrs-providersUpgrade xsomUpgrade python3-nssUpgrade python-nss-debugsourceUpgrade pki-toolsUpgrade pki-serverUpgrade jakarta-commons-httpclientUpgrade pki-caUpgrade jssUpgrade pki-servlet-engineUpgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade javassistUpgrade pki-symkey-debuginfo | Apr 29, 2020 | Sep 15, 2019 |
| Debian | — | Upgrade jackson-databind | Oct 4, 2019 | Sep 15, 2019 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | Feb 24, 2021 | Sep 15, 2019 |
| Oracle_linux | — | Upgrade apache-commons-langUpgrade xsomUpgrade slf4jUpgrade jackson-jaxrs-json-providerUpgrade pki-caUpgrade jackson-annotationsUpgrade jss-javadocUpgrade jackson-coreUpgrade jackson-module-jaxb-annotationsUpgrade pki-serverUpgrade resteasyUpgrade slf4j-jdk14Upgrade ldapjdkUpgrade xerces-j2Upgrade xml-commons-resolverUpgrade glassfish-jaxb-runtimeUpgrade python3-pkiUpgrade bea-stax-apiUpgrade pki-kraUpgrade relaxngDatatypeUpgrade tomcatjssUpgrade xml-commons-apisUpgrade pki-baseUpgrade jackson-databindUpgrade xmlstreambufferUpgrade pki-servlet-4.0-apiUpgrade stax-exUpgrade jackson-jaxrs-providersUpgrade glassfish-jaxb-txw2Upgrade jakarta-commons-httpclientUpgrade velocityUpgrade glassfish-jaxb-coreUpgrade ldapjdk-javadocUpgrade jssUpgrade pki-servlet-engineUpgrade python3-nssUpgrade glassfish-jaxb-apiUpgrade javassistUpgrade xalan-j2Upgrade python-nss-docUpgrade javassist-javadocUpgrade apache-commons-collectionsUpgrade glassfish-fastinfosetUpgrade pki-symkeyUpgrade pki-toolsUpgrade pki-base-java | Jul 22, 2024 | Sep 15, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 15, 2019 |
| Red_hat Jboss_eap | — | — | Mar 12, 2021 | Sep 15, 2019 |
| Redhat_linux | — | Upgrade pki-baseUpgrade xmlstreambufferUpgrade xml-commons-apisUpgrade jackson-module-jaxb-annotationsUpgrade stax-exUpgrade javassist-javadocUpgrade pki-base-javaUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-apiUpgrade ldapjdkUpgrade pki-servlet-engineUpgrade resteasyUpgrade python3-pkiUpgrade javassistUpgrade velocityUpgrade apache-commons-langUpgrade pki-serverUpgrade pki-symkey-debuginfoUpgrade pki-tools-debuginfoUpgrade ldapjdk-javadocUpgrade jakarta-commons-httpclientUpgrade tomcatjssUpgrade glassfish-fastinfosetUpgrade xerces-j2Upgrade bea-stax-apiUpgrade glassfish-jaxb-coreUpgrade jss-javadocUpgrade pki-servlet-4.0-apiUpgrade pki-core-debugsourceUpgrade apache-commons-collectionsUpgrade python3-nss-debuginfoUpgrade pki-toolsUpgrade python-nss-debugsourceUpgrade relaxngDatatypeUpgrade jssUpgrade jackson-annotationsUpgrade slf4jUpgrade jss-debugsourceUpgrade glassfish-jaxb-runtimeUpgrade python3-nssUpgrade jss-debuginfoUpgrade glassfish-jaxb-txw2Upgrade xsomUpgrade pki-caUpgrade pki-kraUpgrade python-nss-docUpgrade jackson-coreUpgrade pki-symkeyUpgrade xalan-j2Upgrade xml-commons-resolverUpgrade pki-core-debuginfoUpgrade jackson-databindUpgrade slf4j-jdk14Upgrade jackson-jaxrs-providers | Apr 29, 2020 | Sep 15, 2019 |
| Rocky_linux | — | Upgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python3-nss | Mar 12, 2024 | Sep 15, 2019 |
| Suse | — | Upgrade jackson-databind | Feb 4, 2022 | Sep 15, 2019 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Sep 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub