A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade jackson-databindUpgrade xmlstreambufferUpgrade glassfish-jaxb-txw2Upgrade jackson-jaxrs-json-providerUpgrade apache-commons-langUpgrade jackson-coreUpgrade xml-commons-apisUpgrade javassist-javadocUpgrade xerces-j2Upgrade xml-commons-resolverUpgrade python3-nssUpgrade glassfish-jaxb-runtimeUpgrade bea-stax-apiUpgrade xalan-j2Upgrade glassfish-jaxb-coreUpgrade xsomUpgrade velocityUpgrade slf4j-jdk14Upgrade python-nss-docUpgrade javassistUpgrade glassfish-fastinfosetUpgrade jackson-annotationsUpgrade stax-exUpgrade relaxngDatatypeUpgrade apache-commons-collectionsUpgrade slf4jUpgrade jakarta-commons-httpclientUpgrade jackson-jaxrs-providersUpgrade glassfish-jaxb-apiUpgrade jackson-module-jaxb-annotations | May 4, 2022 | Sep 15, 2019 |
| Centos_linux | — | Upgrade javassist-javadocUpgrade glassfish-jaxb-runtimeUpgrade jackson-coreUpgrade ldapjdkUpgrade pki-core-debugsourceUpgrade glassfish-jaxb-txw2Upgrade glassfish-jaxb-apiUpgrade pki-core-debuginfoUpgrade stax-exUpgrade xmlstreambufferUpgrade bea-stax-apiUpgrade glassfish-fastinfosetUpgrade slf4j-jdk14Upgrade velocityUpgrade resteasyUpgrade pki-base-javaUpgrade xml-commons-apisUpgrade python3-pkiUpgrade apache-commons-langUpgrade xml-commons-resolverUpgrade pki-tools-debuginfoUpgrade xerces-j2Upgrade jackson-jaxrs-json-providerUpgrade jackson-module-jaxb-annotationsUpgrade jackson-databindUpgrade pki-baseUpgrade tomcatjssUpgrade jss-javadocUpgrade python-nss-docUpgrade python3-nssUpgrade python3-nss-debuginfoUpgrade xalan-j2Upgrade python-nss-debugsourceUpgrade jss-debugsourceUpgrade pki-kraUpgrade ldapjdk-javadocUpgrade jss-debuginfoUpgrade pki-toolsUpgrade jackson-jaxrs-providersUpgrade relaxngDatatypeUpgrade slf4jUpgrade jackson-annotationsUpgrade xsomUpgrade jssUpgrade pki-serverUpgrade pki-symkey-debuginfoUpgrade pki-servlet-4.0-apiUpgrade apache-commons-collectionsUpgrade javassistUpgrade pki-symkeyUpgrade pki-servlet-engineUpgrade jakarta-commons-httpclientUpgrade pki-caUpgrade glassfish-jaxb-core | Apr 29, 2020 | Sep 15, 2019 |
| Debian | — | Upgrade jackson-databind | Oct 4, 2019 | Sep 15, 2019 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | Feb 24, 2021 | Sep 15, 2019 |
| Oracle_linux | — | Upgrade velocityUpgrade jssUpgrade pki-symkeyUpgrade apache-commons-collectionsUpgrade javassist-javadocUpgrade pki-base-javaUpgrade pki-toolsUpgrade xalan-j2Upgrade pki-servlet-engineUpgrade glassfish-fastinfosetUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-apiUpgrade javassistUpgrade python3-nssUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-coreUpgrade python-nss-docUpgrade glassfish-jaxb-txw2Upgrade slf4j-jdk14Upgrade pki-caUpgrade slf4jUpgrade xsomUpgrade xerces-j2Upgrade resteasyUpgrade jackson-coreUpgrade jackson-jaxrs-providersUpgrade xmlstreambufferUpgrade jss-javadocUpgrade pki-baseUpgrade xml-commons-apisUpgrade jackson-jaxrs-json-providerUpgrade jackson-annotationsUpgrade python3-pkiUpgrade pki-serverUpgrade ldapjdkUpgrade relaxngDatatypeUpgrade pki-kraUpgrade bea-stax-apiUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-langUpgrade tomcatjssUpgrade xml-commons-resolverUpgrade stax-exUpgrade jackson-databindUpgrade jackson-module-jaxb-annotationsUpgrade pki-servlet-4.0-api | Jul 22, 2024 | Sep 15, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 15, 2019 |
| Red_hat Jboss_eap | — | — | Mar 12, 2021 | Sep 15, 2019 |
| Redhat_linux | — | Upgrade python-nss-debugsourceUpgrade pki-toolsUpgrade jss-debugsourceUpgrade jackson-annotationsUpgrade apache-commons-collectionsUpgrade python-nss-docUpgrade slf4j-jdk14Upgrade jackson-jaxrs-providersUpgrade python3-nssUpgrade relaxngDatatypeUpgrade pki-servlet-4.0-apiUpgrade slf4jUpgrade glassfish-jaxb-txw2Upgrade pki-kraUpgrade pki-caUpgrade glassfish-jaxb-runtimeUpgrade jackson-coreUpgrade xalan-j2Upgrade xml-commons-resolverUpgrade pki-symkeyUpgrade pki-core-debuginfoUpgrade python3-nss-debuginfoUpgrade jackson-databindUpgrade jssUpgrade jss-debuginfoUpgrade pki-core-debugsourceUpgrade xsomUpgrade pki-servlet-engineUpgrade pki-base-javaUpgrade jackson-jaxrs-json-providerUpgrade jakarta-commons-httpclientUpgrade ldapjdk-javadocUpgrade apache-commons-langUpgrade glassfish-jaxb-apiUpgrade resteasyUpgrade javassist-javadocUpgrade pki-serverUpgrade jss-javadocUpgrade xml-commons-apisUpgrade jackson-module-jaxb-annotationsUpgrade xmlstreambufferUpgrade python3-pkiUpgrade stax-exUpgrade tomcatjssUpgrade xerces-j2Upgrade bea-stax-apiUpgrade pki-symkey-debuginfoUpgrade pki-tools-debuginfoUpgrade javassistUpgrade velocityUpgrade pki-baseUpgrade glassfish-jaxb-coreUpgrade ldapjdkUpgrade glassfish-fastinfoset | Apr 29, 2020 | Sep 15, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python-nss-debugsource | Mar 12, 2024 | Sep 15, 2019 |
| Suse | — | Upgrade jackson-databind | Feb 4, 2022 | Sep 15, 2019 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Sep 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub