A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xsomUpgrade python3-nssUpgrade slf4j-jdk14Upgrade glassfish-jaxb-txw2Upgrade stax-exUpgrade python-nss-docUpgrade apache-commons-collectionsUpgrade velocityUpgrade javassist-javadocUpgrade glassfish-jaxb-coreUpgrade javassistUpgrade jakarta-commons-httpclientUpgrade jackson-databindUpgrade apache-commons-langUpgrade glassfish-jaxb-apiUpgrade bea-stax-apiUpgrade xmlstreambufferUpgrade glassfish-fastinfosetUpgrade jackson-jaxrs-providersUpgrade glassfish-jaxb-runtimeUpgrade xml-commons-apisUpgrade jackson-module-jaxb-annotationsUpgrade slf4jUpgrade xalan-j2Upgrade jackson-jaxrs-json-providerUpgrade relaxngDatatypeUpgrade jackson-coreUpgrade xml-commons-resolverUpgrade xerces-j2Upgrade jackson-annotations | May 4, 2022 | Sep 15, 2019 |
| Centos_linux | — | Upgrade jss-javadocUpgrade pki-core-debugsourceUpgrade glassfish-jaxb-txw2Upgrade python3-nssUpgrade tomcatjssUpgrade pki-servlet-engineUpgrade ldapjdkUpgrade velocityUpgrade jackson-databindUpgrade glassfish-jaxb-runtimeUpgrade glassfish-jaxb-coreUpgrade bea-stax-apiUpgrade python3-pkiUpgrade pki-tools-debuginfoUpgrade jackson-jaxrs-providersUpgrade stax-exUpgrade xerces-j2Upgrade glassfish-fastinfosetUpgrade jackson-jaxrs-json-providerUpgrade slf4j-jdk14Upgrade pki-baseUpgrade jackson-coreUpgrade glassfish-jaxb-apiUpgrade pki-core-debuginfoUpgrade xml-commons-resolverUpgrade resteasyUpgrade apache-commons-langUpgrade xmlstreambufferUpgrade xml-commons-apisUpgrade python-nss-docUpgrade xsomUpgrade jss-debuginfoUpgrade pki-serverUpgrade pki-caUpgrade apache-commons-collectionsUpgrade slf4jUpgrade pki-toolsUpgrade jackson-module-jaxb-annotationsUpgrade jssUpgrade pki-servlet-4.0-apiUpgrade pki-symkey-debuginfoUpgrade javassist-javadocUpgrade pki-symkeyUpgrade pki-base-javaUpgrade xalan-j2Upgrade python-nss-debugsourceUpgrade javassistUpgrade pki-kraUpgrade jss-debugsourceUpgrade jakarta-commons-httpclientUpgrade relaxngDatatypeUpgrade python3-nss-debuginfoUpgrade ldapjdk-javadocUpgrade jackson-annotations | Apr 29, 2020 | Sep 15, 2019 |
| Debian | — | Upgrade jackson-databind | Oct 4, 2019 | Sep 15, 2019 |
| Oracle_linux | — | Upgrade jss-javadocUpgrade apache-commons-langUpgrade slf4j-jdk14Upgrade velocityUpgrade xsomUpgrade pki-kraUpgrade jackson-jaxrs-providersUpgrade pki-servlet-engineUpgrade tomcatjssUpgrade ldapjdk-javadocUpgrade slf4jUpgrade glassfish-jaxb-apiUpgrade resteasyUpgrade python3-pkiUpgrade relaxngDatatypeUpgrade jackson-annotationsUpgrade stax-exUpgrade xml-commons-apisUpgrade jackson-coreUpgrade jackson-jaxrs-json-providerUpgrade pki-toolsUpgrade pki-serverUpgrade jackson-module-jaxb-annotationsUpgrade bea-stax-apiUpgrade jakarta-commons-httpclientUpgrade ldapjdkUpgrade jssUpgrade pki-caUpgrade pki-symkeyUpgrade pki-baseUpgrade glassfish-jaxb-runtimeUpgrade glassfish-jaxb-coreUpgrade apache-commons-collectionsUpgrade pki-base-javaUpgrade xerces-j2Upgrade xalan-j2Upgrade python-nss-docUpgrade javassist-javadocUpgrade glassfish-jaxb-txw2Upgrade jackson-databindUpgrade pki-servlet-4.0-apiUpgrade xmlstreambufferUpgrade xml-commons-resolverUpgrade python3-nssUpgrade javassistUpgrade glassfish-fastinfoset | Jul 22, 2024 | Sep 15, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 15, 2019 |
| Red_hat Jboss_eap | — | — | Mar 12, 2021 | Sep 15, 2019 |
| Redhat_linux | — | Upgrade javassistUpgrade javassist-javadocUpgrade glassfish-jaxb-apiUpgrade pki-servlet-engineUpgrade pki-kraUpgrade jackson-databindUpgrade pki-base-javaUpgrade jackson-jaxrs-json-providerUpgrade xerces-j2Upgrade ldapjdkUpgrade apache-commons-langUpgrade bea-stax-apiUpgrade glassfish-fastinfosetUpgrade xmlstreambufferUpgrade ldapjdk-javadocUpgrade pki-symkey-debuginfoUpgrade velocityUpgrade xml-commons-apisUpgrade glassfish-jaxb-coreUpgrade python3-pkiUpgrade jackson-module-jaxb-annotationsUpgrade pki-tools-debuginfoUpgrade tomcatjssUpgrade stax-exUpgrade pki-baseUpgrade jss-javadocUpgrade resteasyUpgrade jakarta-commons-httpclientUpgrade jackson-jaxrs-providersUpgrade pki-servlet-4.0-apiUpgrade python3-nssUpgrade python3-nss-debuginfoUpgrade pki-toolsUpgrade slf4jUpgrade xalan-j2Upgrade pki-core-debugsourceUpgrade python-nss-debugsourceUpgrade pki-caUpgrade jackson-coreUpgrade relaxngDatatypeUpgrade glassfish-jaxb-txw2Upgrade pki-serverUpgrade jssUpgrade jss-debugsourceUpgrade jackson-annotationsUpgrade python-nss-docUpgrade xsomUpgrade slf4j-jdk14Upgrade pki-core-debuginfoUpgrade apache-commons-collectionsUpgrade xml-commons-resolverUpgrade pki-symkeyUpgrade jss-debuginfoUpgrade glassfish-jaxb-runtime | Apr 29, 2020 | Sep 15, 2019 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python3-nssUpgrade python-nss-doc | Mar 12, 2024 | Sep 15, 2019 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Sep 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub