The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade slf4jUpgrade jackson-bomUpgrade fasterxml-oss-parentUpgrade pki-jackson-databindUpgrade xmlstreambufferUpgrade apache-commons-netUpgrade jackson-databindUpgrade glassfish-jaxb-runtimeUpgrade jackson-annotationsUpgrade glassfish-jaxb-txw2Upgrade xsomUpgrade slf4j-jdk14Upgrade xml-commons-resolverUpgrade jackson-jaxrs-providersUpgrade jackson-jaxrs-json-providerUpgrade xerces-j2Upgrade xalan-j2Upgrade jackson-coreUpgrade xml-commons-apisUpgrade relaxngDatatypeUpgrade pki-servlet-engineUpgrade javassistUpgrade jackson-module-jaxb-annotationsUpgrade apache-commons-langUpgrade glassfish-jaxb-apiUpgrade apache-commons-collectionsUpgrade glassfish-fastinfosetUpgrade velocityUpgrade jackson-modules-baseUpgrade jackson-parentUpgrade jakarta-commons-httpclientUpgrade bea-stax-apiUpgrade glassfish-jaxb-coreUpgrade javassist-javadocUpgrade stax-ex | May 15, 2023 | Mar 11, 2022 |
| Atlassian Bitbucket | — | Upgrade Atlassian Bitbucket to the latest version | Nov 14, 2024 | Oct 17, 2023 |
| Atlassian Jira | — | Upgrade to the latest version of Atlassian JIRA | May 15, 2025 | Nov 21, 2023 |
| Centos_linux | — | Upgrade pki-jackson-jaxrs-json-providerUpgrade pki-jackson-annotationsUpgrade pki-jackson-jaxrs-providersUpgrade pki-jackson-coreUpgrade pki-jackson-module-jaxb-annotationsUpgrade pki-jackson-databind | May 15, 2023 | Mar 11, 2022 |
| Debian | — | Upgrade jackson-databind | May 4, 2022 | Mar 11, 2022 |
| Freebsd | — | Upgrade kafka | Feb 6, 2023 | Feb 4, 2023 |
| Oracle Missing Cpu Oct 2022 | — | Apply the October 2022 Critical Patch Update (CPU) for Oracle Database | Oct 26, 2022 | Mar 11, 2022 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 34429365 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 34298772 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 34236279 for version 12.2.1.4.0. | Jul 25, 2022 | Mar 11, 2022 |
| Oracle_linux | — | Upgrade glassfish-jaxb-txw2Upgrade resteasyUpgrade idm-pki-serverUpgrade jackson-jaxrs-json-providerUpgrade jackson-module-jaxb-annotationsUpgrade idm-pki-toolsUpgrade jackson-coreUpgrade jackson-annotationsUpgrade xsomUpgrade xalan-j2Upgrade idm-tomcatjssUpgrade relaxngDatatypeUpgrade jackson-parentUpgrade jackson-databindUpgrade glassfish-fastinfosetUpgrade xml-commons-apisUpgrade pki-jackson-databindUpgrade apache-commons-netUpgrade apache-commons-langUpgrade pki-jackson-jaxrs-json-providerUpgrade resteasy-javadocUpgrade javassist-javadocUpgrade slf4jUpgrade xml-commons-resolverUpgrade jackson-modules-baseUpgrade javassistUpgrade bea-stax-apiUpgrade idm-pki-acmeUpgrade idm-pki-caUpgrade jackson-jaxrs-providersUpgrade xmlstreambufferUpgrade idm-pki-symkeyUpgrade jackson-bomUpgrade glassfish-jaxb-coreUpgrade pki-servlet-engineUpgrade stax-exUpgrade idm-jss-javadocUpgrade idm-jssUpgrade fasterxml-oss-parentUpgrade glassfish-jaxb-apiUpgrade idm-pki-base-javaUpgrade apache-commons-collectionsUpgrade pki-jackson-jaxrs-providersUpgrade velocityUpgrade pki-jackson-annotationsUpgrade python3-idm-pkiUpgrade idm-pki-kraUpgrade idm-pki-baseUpgrade pki-jackson-module-jaxb-annotationsUpgrade idm-ldapjdk-javadocUpgrade slf4j-jdk14Upgrade jakarta-commons-httpclientUpgrade pki-jackson-coreUpgrade xerces-j2Upgrade glassfish-jaxb-runtimeUpgrade idm-ldapjdk | May 17, 2023 | Aug 13, 2020 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 11, 2022 |
| Redhat_linux | — | Upgrade apache-commons-collectionsUpgrade jackson-bomUpgrade pki-core-debugsourceUpgrade idm-pki-symkeyUpgrade jackson-modules-baseUpgrade slf4j-jdk14Upgrade pki-jackson-module-jaxb-annotationsUpgrade velocityUpgrade idm-pki-caUpgrade xml-commons-resolverUpgrade python3-idm-pkiUpgrade idm-pki-serverUpgrade idm-jss-javadocUpgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-txw2Upgrade jackson-parentUpgrade idm-jssUpgrade xalan-j2Upgrade idm-ldapjdk-javadocUpgrade idm-pki-kraUpgrade jackson-module-jaxb-annotationsUpgrade jackson-annotationsUpgrade jss-debugsourceUpgrade idm-pki-acmeUpgrade idm-pki-toolsUpgrade pki-jackson-jaxrs-json-providerUpgrade glassfish-jaxb-apiUpgrade xml-commons-apisUpgrade jackson-coreUpgrade glassfish-jaxb-runtimeUpgrade idm-jss-debuginfoUpgrade idm-pki-baseUpgrade xmlstreambufferUpgrade idm-tomcatjssUpgrade bea-stax-apiUpgrade pki-jackson-coreUpgrade stax-exUpgrade idm-ldapjdkUpgrade pki-jackson-databindUpgrade pki-core-debuginfoUpgrade javassist-javadocUpgrade fasterxml-oss-parentUpgrade pki-jackson-jaxrs-providersUpgrade javassistUpgrade jakarta-commons-httpclient | May 15, 2023 | Mar 11, 2022 |
| Rocky_linux | — | Upgrade idm-jss-debuginfoUpgrade idm-pki-symkey-debuginfoUpgrade pki-core-debugsourceUpgrade jss-debugsourceUpgrade idm-pki-tools-debuginfoUpgrade pki-core-debuginfoUpgrade idm-pki-symkeyUpgrade idm-pki-toolsUpgrade idm-jss-javadocUpgrade idm-jss | Jun 17, 2024 | Mar 11, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.9Upgrade Splunk Enterprise to version 9.0.2Upgrade Splunk Enterprise to version 8.1.12 | Sep 30, 2025 | Mar 11, 2022 |
| Suse | — | Upgrade jackson-dataformats-binary-javadocUpgrade jackson-databind-javadocUpgrade jackson-dataformat-smileUpgrade jackson-dataformat-cborUpgrade jackson-annotations-javadocUpgrade jackson-dataformats-binaryUpgrade jackson-bomUpgrade jackson-databindUpgrade jackson-coreUpgrade jackson-core-javadocUpgrade jackson-annotations | Aug 9, 2024 | Mar 11, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub