A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xmlstreambufferUpgrade xerces-j2Upgrade xml-commons-resolverUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-runtimeUpgrade bea-stax-apiUpgrade jackson-coreUpgrade xml-commons-apisUpgrade xalan-j2Upgrade glassfish-jaxb-txw2Upgrade javassist-javadocUpgrade apache-commons-langUpgrade jackson-databindUpgrade python3-nssUpgrade glassfish-jaxb-coreUpgrade slf4jUpgrade jackson-jaxrs-providersUpgrade python-nss-docUpgrade velocityUpgrade jackson-module-jaxb-annotationsUpgrade glassfish-jaxb-apiUpgrade stax-exUpgrade glassfish-fastinfosetUpgrade slf4j-jdk14Upgrade jackson-annotationsUpgrade javassistUpgrade xsomUpgrade jakarta-commons-httpclientUpgrade relaxngDatatypeUpgrade apache-commons-collections | May 4, 2022 | Sep 15, 2019 |
| Centos_linux | — | Upgrade xalan-j2Upgrade glassfish-jaxb-coreUpgrade python-nss-debugsourceUpgrade python3-nssUpgrade jssUpgrade jakarta-commons-httpclientUpgrade relaxngDatatypeUpgrade pki-caUpgrade pki-symkey-debuginfoUpgrade xsomUpgrade pki-servlet-4.0-apiUpgrade pki-serverUpgrade javassistUpgrade pki-symkeyUpgrade jackson-annotationsUpgrade python-nss-docUpgrade ldapjdk-javadocUpgrade pki-toolsUpgrade python3-nss-debuginfoUpgrade apache-commons-collectionsUpgrade pki-servlet-engineUpgrade jss-debuginfoUpgrade jss-debugsourceUpgrade slf4jUpgrade jackson-jaxrs-providersUpgrade pki-kraUpgrade pki-tools-debuginfoUpgrade xml-commons-resolverUpgrade jackson-coreUpgrade velocityUpgrade bea-stax-apiUpgrade pki-core-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade xmlstreambufferUpgrade ldapjdkUpgrade jackson-module-jaxb-annotationsUpgrade pki-core-debugsourceUpgrade slf4j-jdk14Upgrade pki-baseUpgrade python3-pkiUpgrade jackson-databindUpgrade pki-base-javaUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-txw2Upgrade apache-commons-langUpgrade glassfish-jaxb-apiUpgrade stax-exUpgrade xml-commons-apisUpgrade javassist-javadocUpgrade tomcatjssUpgrade jss-javadocUpgrade xerces-j2Upgrade glassfish-fastinfosetUpgrade resteasy | Apr 29, 2020 | Sep 15, 2019 |
| Debian | — | Upgrade jackson-databind | Oct 4, 2019 | Sep 15, 2019 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | Feb 24, 2021 | Sep 15, 2019 |
| Oracle_linux | — | Upgrade pki-kraUpgrade slf4jUpgrade xsomUpgrade bea-stax-apiUpgrade relaxngDatatypeUpgrade python3-pkiUpgrade pki-baseUpgrade jackson-jaxrs-providersUpgrade jackson-module-jaxb-annotationsUpgrade stax-exUpgrade pki-servlet-4.0-apiUpgrade tomcatjssUpgrade jss-javadocUpgrade xml-commons-apisUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-runtimeUpgrade jackson-databindUpgrade pki-caUpgrade jackson-annotationsUpgrade xmlstreambufferUpgrade slf4j-jdk14Upgrade jackson-coreUpgrade ldapjdkUpgrade resteasyUpgrade xerces-j2Upgrade xml-commons-resolverUpgrade apache-commons-langUpgrade pki-serverUpgrade ldapjdk-javadocUpgrade glassfish-fastinfosetUpgrade apache-commons-collectionsUpgrade javassist-javadocUpgrade glassfish-jaxb-txw2Upgrade javassistUpgrade glassfish-jaxb-coreUpgrade pki-toolsUpgrade pki-servlet-engineUpgrade velocityUpgrade pki-base-javaUpgrade jssUpgrade jakarta-commons-httpclientUpgrade python-nss-docUpgrade xalan-j2Upgrade pki-symkeyUpgrade python3-nssUpgrade glassfish-jaxb-api | Jul 22, 2024 | Sep 15, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 15, 2019 |
| Red_hat Jboss_eap | — | — | Mar 12, 2021 | Sep 15, 2019 |
| Redhat_linux | — | Upgrade jss-debuginfoUpgrade jackson-coreUpgrade xsomUpgrade pki-kraUpgrade pki-caUpgrade xalan-j2Upgrade relaxngDatatypeUpgrade slf4jUpgrade python-nss-docUpgrade pki-symkeyUpgrade jackson-databindUpgrade pki-core-debugsourceUpgrade pki-core-debuginfoUpgrade jss-debugsourceUpgrade xml-commons-resolverUpgrade slf4j-jdk14Upgrade python-nss-debugsourceUpgrade apache-commons-collectionsUpgrade pki-servlet-4.0-apiUpgrade python3-nss-debuginfoUpgrade jackson-jaxrs-providersUpgrade glassfish-jaxb-runtimeUpgrade glassfish-jaxb-txw2Upgrade pki-toolsUpgrade python3-nssUpgrade jackson-annotationsUpgrade jssUpgrade python3-pkiUpgrade bea-stax-apiUpgrade javassistUpgrade xml-commons-apisUpgrade pki-symkey-debuginfoUpgrade xerces-j2Upgrade xmlstreambufferUpgrade ldapjdkUpgrade jss-javadocUpgrade stax-exUpgrade pki-baseUpgrade velocityUpgrade jakarta-commons-httpclientUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-apiUpgrade javassist-javadocUpgrade glassfish-jaxb-coreUpgrade tomcatjssUpgrade pki-tools-debuginfoUpgrade pki-servlet-engineUpgrade pki-serverUpgrade ldapjdk-javadocUpgrade apache-commons-langUpgrade jackson-jaxrs-json-providerUpgrade resteasyUpgrade pki-base-javaUpgrade jackson-module-jaxb-annotations | Apr 29, 2020 | Sep 15, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss-debuginfo | Mar 12, 2024 | Sep 15, 2019 |
| Suse | — | Upgrade jackson-databind | Feb 4, 2022 | Sep 15, 2019 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Sep 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub