A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade stax-exUpgrade xsomUpgrade apache-commons-collectionsUpgrade jackson-annotationsUpgrade slf4jUpgrade slf4j-jdk14Upgrade jakarta-commons-httpclientUpgrade javassistUpgrade jackson-module-jaxb-annotationsUpgrade relaxngDatatypeUpgrade python-nss-docUpgrade velocityUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-providersUpgrade xml-commons-resolverUpgrade apache-commons-langUpgrade glassfish-jaxb-txw2Upgrade jackson-coreUpgrade glassfish-jaxb-coreUpgrade javassist-javadocUpgrade glassfish-jaxb-runtimeUpgrade bea-stax-apiUpgrade xmlstreambufferUpgrade python3-nssUpgrade jackson-jaxrs-json-providerUpgrade xalan-j2Upgrade xerces-j2Upgrade xml-commons-apisUpgrade jackson-databind | May 4, 2022 | Sep 15, 2019 |
| Centos_linux | — | Upgrade pki-symkeyUpgrade pki-servlet-4.0-apiUpgrade javassistUpgrade python3-nss-debuginfoUpgrade xsomUpgrade jssUpgrade ldapjdk-javadocUpgrade python3-nssUpgrade pki-kraUpgrade xalan-j2Upgrade glassfish-jaxb-coreUpgrade jakarta-commons-httpclientUpgrade pki-serverUpgrade pki-caUpgrade pki-symkey-debuginfoUpgrade pki-toolsUpgrade jss-debugsourceUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade jackson-jaxrs-providersUpgrade jss-debuginfoUpgrade jackson-annotationsUpgrade slf4jUpgrade apache-commons-collectionsUpgrade pki-servlet-engineUpgrade relaxngDatatypeUpgrade stax-exUpgrade xerces-j2Upgrade glassfish-jaxb-apiUpgrade tomcatjssUpgrade pki-base-javaUpgrade xml-commons-apisUpgrade jackson-jaxrs-json-providerUpgrade slf4j-jdk14Upgrade pki-core-debugsourceUpgrade pki-baseUpgrade jackson-databindUpgrade apache-commons-langUpgrade resteasyUpgrade javassist-javadocUpgrade jackson-module-jaxb-annotationsUpgrade ldapjdkUpgrade pki-core-debuginfoUpgrade xml-commons-resolverUpgrade velocityUpgrade jackson-coreUpgrade pki-tools-debuginfoUpgrade glassfish-fastinfosetUpgrade bea-stax-apiUpgrade jss-javadocUpgrade glassfish-jaxb-runtimeUpgrade xmlstreambufferUpgrade python3-pkiUpgrade glassfish-jaxb-txw2 | Apr 29, 2020 | Sep 15, 2019 |
| Debian | — | Upgrade jackson-databind | Oct 4, 2019 | Sep 15, 2019 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | Feb 24, 2021 | Sep 15, 2019 |
| Oracle_linux | — | Upgrade jackson-coreUpgrade slf4j-jdk14Upgrade jackson-jaxrs-providersUpgrade apache-commons-langUpgrade resteasyUpgrade xml-commons-resolverUpgrade jackson-databindUpgrade xerces-j2Upgrade jackson-annotationsUpgrade pki-baseUpgrade pki-caUpgrade jackson-module-jaxb-annotationsUpgrade ldapjdkUpgrade slf4jUpgrade xsomUpgrade jackson-jaxrs-json-providerUpgrade tomcatjssUpgrade bea-stax-apiUpgrade relaxngDatatypeUpgrade jss-javadocUpgrade xml-commons-apisUpgrade pki-kraUpgrade xmlstreambufferUpgrade pki-servlet-4.0-apiUpgrade stax-exUpgrade glassfish-jaxb-runtimeUpgrade python3-pkiUpgrade pki-serverUpgrade javassistUpgrade ldapjdk-javadocUpgrade python3-nssUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-coreUpgrade javassist-javadocUpgrade pki-symkeyUpgrade xalan-j2Upgrade velocityUpgrade glassfish-fastinfosetUpgrade apache-commons-collectionsUpgrade pki-servlet-engineUpgrade glassfish-jaxb-apiUpgrade glassfish-jaxb-txw2Upgrade pki-toolsUpgrade python-nss-docUpgrade pki-base-javaUpgrade jss | Jul 22, 2024 | Sep 15, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 15, 2019 |
| Red_hat Jboss_eap | — | — | Mar 12, 2021 | Sep 15, 2019 |
| Redhat_linux | — | Upgrade apache-commons-langUpgrade jakarta-commons-httpclientUpgrade pki-serverUpgrade javassistUpgrade glassfish-fastinfosetUpgrade pki-servlet-engineUpgrade tomcatjssUpgrade resteasyUpgrade pki-tools-debuginfoUpgrade ldapjdkUpgrade pki-baseUpgrade velocityUpgrade jackson-module-jaxb-annotationsUpgrade bea-stax-apiUpgrade xml-commons-apisUpgrade javassist-javadocUpgrade jackson-jaxrs-json-providerUpgrade python3-pkiUpgrade xmlstreambufferUpgrade stax-exUpgrade glassfish-jaxb-coreUpgrade pki-base-javaUpgrade glassfish-jaxb-apiUpgrade xerces-j2Upgrade pki-symkey-debuginfoUpgrade jss-javadocUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-txw2Upgrade relaxngDatatypeUpgrade slf4j-jdk14Upgrade jackson-coreUpgrade pki-toolsUpgrade glassfish-jaxb-runtimeUpgrade python3-nssUpgrade python3-nss-debuginfoUpgrade apache-commons-collectionsUpgrade pki-core-debuginfoUpgrade pki-servlet-4.0-apiUpgrade slf4jUpgrade jssUpgrade python-nss-debugsourceUpgrade pki-kraUpgrade xalan-j2Upgrade jackson-jaxrs-providersUpgrade python-nss-docUpgrade xml-commons-resolverUpgrade pki-core-debugsourceUpgrade jackson-annotationsUpgrade pki-caUpgrade jss-debuginfoUpgrade xsomUpgrade jss-debugsourceUpgrade pki-symkeyUpgrade jackson-databind | Apr 29, 2020 | Sep 15, 2019 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python3-nss | Mar 12, 2024 | Sep 15, 2019 |
| Suse | — | Upgrade jackson-databind | Feb 4, 2022 | Sep 15, 2019 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Sep 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub