A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade velocityUpgrade python-nss-docUpgrade jackson-module-jaxb-annotationsUpgrade stax-exUpgrade jakarta-commons-httpclientUpgrade glassfish-fastinfosetUpgrade xsomUpgrade glassfish-jaxb-apiUpgrade slf4jUpgrade jackson-annotationsUpgrade apache-commons-collectionsUpgrade slf4j-jdk14Upgrade javassistUpgrade relaxngDatatypeUpgrade jackson-jaxrs-providersUpgrade xalan-j2Upgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-txw2Upgrade glassfish-jaxb-coreUpgrade apache-commons-langUpgrade python3-nssUpgrade glassfish-jaxb-runtimeUpgrade xmlstreambufferUpgrade jackson-coreUpgrade xml-commons-resolverUpgrade javassist-javadocUpgrade bea-stax-apiUpgrade jackson-databindUpgrade xerces-j2Upgrade xml-commons-apis | May 4, 2022 | Sep 15, 2019 |
| Centos_linux | — | Upgrade pki-core-debugsourceUpgrade slf4j-jdk14Upgrade jackson-module-jaxb-annotationsUpgrade jackson-jaxrs-json-providerUpgrade tomcatjssUpgrade stax-exUpgrade pki-base-javaUpgrade xml-commons-apisUpgrade jss-javadocUpgrade resteasyUpgrade bea-stax-apiUpgrade xmlstreambufferUpgrade xerces-j2Upgrade ldapjdkUpgrade jackson-coreUpgrade pki-tools-debuginfoUpgrade velocityUpgrade xml-commons-resolverUpgrade jackson-databindUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-runtimeUpgrade javassist-javadocUpgrade pki-core-debuginfoUpgrade python3-pkiUpgrade pki-baseUpgrade apache-commons-langUpgrade glassfish-jaxb-apiUpgrade glassfish-jaxb-txw2Upgrade jssUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-coreUpgrade python-nss-docUpgrade pki-symkeyUpgrade relaxngDatatypeUpgrade python3-nss-debuginfoUpgrade jakarta-commons-httpclientUpgrade python3-nssUpgrade pki-servlet-engineUpgrade pki-toolsUpgrade jss-debuginfoUpgrade python-nss-debugsourceUpgrade pki-serverUpgrade javassistUpgrade xalan-j2Upgrade jackson-jaxrs-providersUpgrade jackson-annotationsUpgrade xsomUpgrade slf4jUpgrade pki-symkey-debuginfoUpgrade pki-caUpgrade pki-kraUpgrade pki-servlet-4.0-apiUpgrade jss-debugsourceUpgrade ldapjdk-javadoc | Apr 29, 2020 | Sep 15, 2019 |
| Debian | — | Upgrade jackson-databind | Oct 4, 2019 | Sep 15, 2019 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | Feb 24, 2021 | Sep 15, 2019 |
| Oracle_linux | — | Upgrade jackson-annotationsUpgrade slf4j-jdk14Upgrade xsomUpgrade tomcatjssUpgrade slf4jUpgrade jackson-module-jaxb-annotationsUpgrade jackson-jaxrs-json-providerUpgrade xml-commons-apisUpgrade xerces-j2Upgrade pki-serverUpgrade apache-commons-langUpgrade glassfish-jaxb-runtimeUpgrade pki-caUpgrade xml-commons-resolverUpgrade resteasyUpgrade pki-baseUpgrade jss-javadocUpgrade ldapjdkUpgrade bea-stax-apiUpgrade pki-kraUpgrade xmlstreambufferUpgrade pki-servlet-4.0-apiUpgrade jackson-databindUpgrade stax-exUpgrade python3-pkiUpgrade relaxngDatatypeUpgrade jackson-coreUpgrade jackson-jaxrs-providersUpgrade pki-base-javaUpgrade apache-commons-collectionsUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-apiUpgrade pki-servlet-engineUpgrade velocityUpgrade jssUpgrade python-nss-docUpgrade glassfish-jaxb-coreUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-txw2Upgrade xalan-j2Upgrade pki-symkeyUpgrade javassist-javadocUpgrade javassistUpgrade python3-nssUpgrade glassfish-fastinfosetUpgrade pki-tools | Jul 22, 2024 | Sep 15, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 15, 2019 |
| Red_hat Jboss_eap | — | — | Mar 12, 2021 | Sep 15, 2019 |
| Redhat_linux | — | Upgrade slf4jUpgrade jss-debuginfoUpgrade relaxngDatatypeUpgrade jackson-annotationsUpgrade jss-debugsourceUpgrade jssUpgrade python3-nss-debuginfoUpgrade pki-core-debuginfoUpgrade xalan-j2Upgrade pki-core-debugsourceUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade pki-symkeyUpgrade slf4j-jdk14Upgrade jackson-databindUpgrade apache-commons-collectionsUpgrade pki-toolsUpgrade xml-commons-resolverUpgrade xsomUpgrade python3-nssUpgrade glassfish-jaxb-txw2Upgrade jackson-jaxrs-providersUpgrade pki-servlet-4.0-apiUpgrade glassfish-jaxb-runtimeUpgrade pki-caUpgrade pki-kraUpgrade jackson-coreUpgrade python3-pkiUpgrade jakarta-commons-httpclientUpgrade pki-tools-debuginfoUpgrade bea-stax-apiUpgrade pki-symkey-debuginfoUpgrade ldapjdkUpgrade pki-serverUpgrade javassistUpgrade xml-commons-apisUpgrade pki-base-javaUpgrade xmlstreambufferUpgrade jackson-module-jaxb-annotationsUpgrade pki-servlet-engineUpgrade tomcatjssUpgrade jackson-jaxrs-json-providerUpgrade resteasyUpgrade glassfish-fastinfosetUpgrade javassist-javadocUpgrade jss-javadocUpgrade stax-exUpgrade velocityUpgrade glassfish-jaxb-apiUpgrade pki-baseUpgrade glassfish-jaxb-coreUpgrade xerces-j2Upgrade apache-commons-langUpgrade ldapjdk-javadoc | Apr 29, 2020 | Sep 15, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss-debuginfo | Mar 12, 2024 | Sep 15, 2019 |
| Suse | — | Upgrade jackson-databind | Feb 4, 2022 | Sep 15, 2019 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Sep 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub