A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xerces-j2Upgrade javassist-javadocUpgrade xml-commons-resolverUpgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-runtimeUpgrade xml-commons-apisUpgrade apache-commons-langUpgrade jackson-databindUpgrade python3-nssUpgrade xmlstreambufferUpgrade jackson-coreUpgrade glassfish-jaxb-txw2Upgrade bea-stax-apiUpgrade xalan-j2Upgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-apiUpgrade xsomUpgrade glassfish-fastinfosetUpgrade jakarta-commons-httpclientUpgrade javassistUpgrade python-nss-docUpgrade apache-commons-collectionsUpgrade jackson-jaxrs-providersUpgrade slf4jUpgrade stax-exUpgrade jackson-annotationsUpgrade slf4j-jdk14Upgrade velocityUpgrade jackson-module-jaxb-annotationsUpgrade relaxngDatatype | May 4, 2022 | Sep 15, 2019 |
| Centos_linux | — | Upgrade xsomUpgrade pki-symkey-debuginfoUpgrade xalan-j2Upgrade pki-servlet-4.0-apiUpgrade pki-toolsUpgrade pki-serverUpgrade pki-caUpgrade glassfish-jaxb-coreUpgrade jakarta-commons-httpclientUpgrade pki-servlet-engineUpgrade jssUpgrade python3-nssUpgrade python-nss-docUpgrade javassistUpgrade slf4jUpgrade jackson-jaxrs-providersUpgrade pki-symkeyUpgrade python-nss-debugsourceUpgrade pki-kraUpgrade jss-debuginfoUpgrade jss-debugsourceUpgrade ldapjdk-javadocUpgrade jackson-annotationsUpgrade python3-nss-debuginfoUpgrade relaxngDatatypeUpgrade apache-commons-collectionsUpgrade pki-core-debuginfoUpgrade xml-commons-resolverUpgrade ldapjdkUpgrade glassfish-jaxb-runtimeUpgrade jackson-coreUpgrade xerces-j2Upgrade glassfish-fastinfosetUpgrade jss-javadocUpgrade javassist-javadocUpgrade glassfish-jaxb-apiUpgrade apache-commons-langUpgrade python3-pkiUpgrade glassfish-jaxb-txw2Upgrade xmlstreambufferUpgrade resteasyUpgrade bea-stax-apiUpgrade velocityUpgrade pki-baseUpgrade jackson-databindUpgrade pki-base-javaUpgrade xml-commons-apisUpgrade stax-exUpgrade jackson-jaxrs-json-providerUpgrade pki-tools-debuginfoUpgrade tomcatjssUpgrade jackson-module-jaxb-annotationsUpgrade pki-core-debugsourceUpgrade slf4j-jdk14 | Apr 29, 2020 | Sep 15, 2019 |
| Debian | — | Upgrade jackson-databind | Oct 4, 2019 | Sep 15, 2019 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | Feb 24, 2021 | Sep 15, 2019 |
| Oracle_linux | — | Upgrade jackson-coreUpgrade apache-commons-langUpgrade pki-serverUpgrade ldapjdkUpgrade relaxngDatatypeUpgrade glassfish-jaxb-runtimeUpgrade jackson-jaxrs-providersUpgrade stax-exUpgrade jackson-databindUpgrade xml-commons-resolverUpgrade python3-pkiUpgrade bea-stax-apiUpgrade xmlstreambufferUpgrade xerces-j2Upgrade jss-javadocUpgrade jackson-annotationsUpgrade slf4jUpgrade slf4j-jdk14Upgrade xsomUpgrade jackson-jaxrs-json-providerUpgrade pki-caUpgrade tomcatjssUpgrade xml-commons-apisUpgrade resteasyUpgrade pki-kraUpgrade jackson-module-jaxb-annotationsUpgrade pki-servlet-4.0-apiUpgrade pki-baseUpgrade velocityUpgrade python3-nssUpgrade glassfish-fastinfosetUpgrade apache-commons-collectionsUpgrade pki-toolsUpgrade javassistUpgrade javassist-javadocUpgrade jssUpgrade pki-symkeyUpgrade python-nss-docUpgrade xalan-j2Upgrade glassfish-jaxb-apiUpgrade glassfish-jaxb-txw2Upgrade pki-servlet-engineUpgrade pki-base-javaUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-coreUpgrade ldapjdk-javadoc | Jul 22, 2024 | Sep 15, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 15, 2019 |
| Red_hat Jboss_eap | — | — | Mar 12, 2021 | Sep 15, 2019 |
| Redhat_linux | — | Upgrade pki-core-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade jssUpgrade glassfish-jaxb-txw2Upgrade relaxngDatatypeUpgrade slf4j-jdk14Upgrade slf4jUpgrade python3-nssUpgrade jackson-coreUpgrade jackson-databindUpgrade xsomUpgrade pki-core-debugsourceUpgrade pki-toolsUpgrade jackson-jaxrs-providersUpgrade jackson-annotationsUpgrade pki-servlet-4.0-apiUpgrade pki-kraUpgrade jss-debugsourceUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade xalan-j2Upgrade jss-debuginfoUpgrade pki-caUpgrade python-nss-debugsourceUpgrade xml-commons-resolverUpgrade pki-symkeyUpgrade apache-commons-collectionsUpgrade jakarta-commons-httpclientUpgrade resteasyUpgrade ldapjdkUpgrade jackson-jaxrs-json-providerUpgrade pki-base-javaUpgrade xml-commons-apisUpgrade xmlstreambufferUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-coreUpgrade apache-commons-langUpgrade velocityUpgrade javassist-javadocUpgrade pki-symkey-debuginfoUpgrade pki-baseUpgrade jss-javadocUpgrade pki-servlet-engineUpgrade stax-exUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-apiUpgrade bea-stax-apiUpgrade xerces-j2Upgrade python3-pkiUpgrade pki-tools-debuginfoUpgrade pki-serverUpgrade javassistUpgrade tomcatjssUpgrade jackson-module-jaxb-annotations | Apr 29, 2020 | Sep 15, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python-nss-debugsource | Mar 12, 2024 | Sep 15, 2019 |
| Suse | — | Upgrade jackson-databind | Feb 4, 2022 | Sep 15, 2019 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Sep 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub