FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glassfish-fastinfosetUpgrade glassfish-jaxb-coreUpgrade velocityUpgrade javassistUpgrade glassfish-jaxb-apiUpgrade bea-stax-apiUpgrade apache-commons-collectionsUpgrade jakarta-commons-httpclientUpgrade javassist-javadocUpgrade slf4jUpgrade stax-exUpgrade xalan-j2Upgrade jackson-jaxrs-json-providerUpgrade jackson-coreUpgrade xml-commons-apisUpgrade python-nss-docUpgrade jackson-annotationsUpgrade glassfish-jaxb-txw2Upgrade xmlstreambufferUpgrade xsomUpgrade slf4j-jdk14Upgrade apache-commons-langUpgrade relaxngDatatypeUpgrade glassfish-jaxb-runtimeUpgrade jackson-databindUpgrade xml-commons-resolverUpgrade xerces-j2Upgrade python3-nssUpgrade jackson-jaxrs-providersUpgrade jackson-module-jaxb-annotations | May 4, 2022 | Jan 3, 2020 |
| Centos_linux | — | Upgrade javassistUpgrade jackson-module-jaxb-annotationsUpgrade jackson-annotationsUpgrade pki-toolsUpgrade pki-serverUpgrade ldapjdk-javadocUpgrade xsomUpgrade xalan-j2Upgrade jackson-jaxrs-json-providerUpgrade jss-debugsourceUpgrade xml-commons-resolverUpgrade xml-commons-apisUpgrade python3-nss-debuginfoUpgrade ldapjdkUpgrade slf4jUpgrade pki-core-debugsourceUpgrade jackson-databindUpgrade resteasyUpgrade pki-core-debuginfoUpgrade glassfish-jaxb-txw2Upgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-apiUpgrade tomcatjssUpgrade pki-servlet-engineUpgrade glassfish-fastinfosetUpgrade pki-base-javaUpgrade python3-pkiUpgrade xmlstreambufferUpgrade jss-javadocUpgrade xerces-j2Upgrade relaxngDatatypeUpgrade jakarta-commons-httpclientUpgrade javassist-javadocUpgrade apache-commons-langUpgrade pki-symkey-debuginfoUpgrade stax-exUpgrade glassfish-jaxb-runtimeUpgrade jssUpgrade python-nss-docUpgrade pki-tools-debuginfoUpgrade apache-commons-collectionsUpgrade pki-baseUpgrade pki-kraUpgrade pki-symkeyUpgrade slf4j-jdk14Upgrade velocityUpgrade bea-stax-apiUpgrade pki-caUpgrade jackson-coreUpgrade python-nss-debugsourceUpgrade python3-nssUpgrade jss-debuginfoUpgrade jackson-jaxrs-providersUpgrade pki-servlet-4.0-api | Feb 8, 2021 | Jan 3, 2020 |
| Debian | — | Upgrade jackson-databind | Feb 24, 2020 | Jan 3, 2020 |
| Redhat_linux | — | Upgrade xmlstreambufferUpgrade pki-tools-debuginfoUpgrade jackson-coreUpgrade apache-commons-langUpgrade jackson-databindUpgrade jackson-jaxrs-json-providerUpgrade pki-base-javaUpgrade resteasyUpgrade bea-stax-apiUpgrade xalan-j2Upgrade jackson-jaxrs-providersUpgrade relaxngDatatypeUpgrade xml-commons-apisUpgrade pki-baseUpgrade ldapjdkUpgrade glassfish-jaxb-apiUpgrade jss-javadocUpgrade pki-core-debugsourceUpgrade pki-servlet-4.0-apiUpgrade jackson-module-jaxb-annotationsUpgrade jackson-annotationsUpgrade pki-kraUpgrade glassfish-jaxb-runtimeUpgrade xerces-j2Upgrade python3-pkiUpgrade velocityUpgrade xml-commons-resolverUpgrade pki-serverUpgrade pki-core-debuginfoUpgrade glassfish-fastinfosetUpgrade tomcatjssUpgrade slf4j-jdk14Upgrade jakarta-commons-httpclientUpgrade slf4jUpgrade stax-exUpgrade glassfish-jaxb-txw2Upgrade pki-caUpgrade jss-debuginfoUpgrade python3-nss-debuginfoUpgrade ldapjdk-javadocUpgrade xsomUpgrade jssUpgrade pki-symkeyUpgrade pki-symkey-debuginfoUpgrade pki-toolsUpgrade javassistUpgrade apache-commons-collectionsUpgrade python3-nssUpgrade python-nss-debugsourceUpgrade glassfish-jaxb-coreUpgrade javassist-javadocUpgrade jss-debugsourceUpgrade python-nss-docUpgrade pki-servlet-engine | Feb 8, 2021 | Jan 3, 2020 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Jan 3, 2020 |
| Suse | — | Upgrade jackson-databind | Feb 4, 2022 | Jan 3, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Jan 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub