A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade velocityUpgrade javassist-javadocUpgrade python-nss-docUpgrade apache-commons-collectionsUpgrade jakarta-commons-httpclientUpgrade slf4j-jdk14Upgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-txw2Upgrade stax-exUpgrade javassistUpgrade xsomUpgrade python3-nssUpgrade xerces-j2Upgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-json-providerUpgrade glassfish-fastinfosetUpgrade relaxngDatatypeUpgrade jackson-module-jaxb-annotationsUpgrade bea-stax-apiUpgrade glassfish-jaxb-runtimeUpgrade xalan-j2Upgrade jackson-coreUpgrade jackson-jaxrs-providersUpgrade xml-commons-resolverUpgrade xml-commons-apisUpgrade jackson-annotationsUpgrade apache-commons-langUpgrade jackson-databindUpgrade xmlstreambufferUpgrade slf4j | May 4, 2022 | Sep 15, 2019 |
| Centos_linux | — | Upgrade xalan-j2Upgrade jss-debugsourceUpgrade jakarta-commons-httpclientUpgrade pki-caUpgrade xsomUpgrade pki-toolsUpgrade pki-serverUpgrade jss-debuginfoUpgrade slf4jUpgrade pki-servlet-4.0-apiUpgrade apache-commons-collectionsUpgrade python-nss-docUpgrade jackson-module-jaxb-annotationsUpgrade python-nss-debugsourceUpgrade jssUpgrade javassistUpgrade javassist-javadocUpgrade pki-symkeyUpgrade ldapjdk-javadocUpgrade python3-nss-debuginfoUpgrade jackson-annotationsUpgrade relaxngDatatypeUpgrade pki-symkey-debuginfoUpgrade pki-base-javaUpgrade pki-kraUpgrade pki-tools-debuginfoUpgrade jackson-coreUpgrade jackson-jaxrs-providersUpgrade glassfish-jaxb-txw2Upgrade ldapjdkUpgrade glassfish-jaxb-runtimeUpgrade jackson-databindUpgrade apache-commons-langUpgrade jackson-jaxrs-json-providerUpgrade xmlstreambufferUpgrade bea-stax-apiUpgrade python3-nssUpgrade velocityUpgrade python3-pkiUpgrade stax-exUpgrade slf4j-jdk14Upgrade xml-commons-apisUpgrade xml-commons-resolverUpgrade resteasyUpgrade pki-core-debuginfoUpgrade xerces-j2Upgrade jss-javadocUpgrade tomcatjssUpgrade glassfish-jaxb-coreUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-apiUpgrade pki-servlet-engineUpgrade pki-baseUpgrade pki-core-debugsource | Apr 29, 2020 | Sep 15, 2019 |
| Debian | — | Upgrade jackson-databind | Oct 4, 2019 | Sep 15, 2019 |
| Oracle_linux | — | Upgrade stax-exUpgrade slf4jUpgrade jackson-jaxrs-providersUpgrade tomcatjssUpgrade slf4j-jdk14Upgrade apache-commons-langUpgrade jackson-annotationsUpgrade jackson-jaxrs-json-providerUpgrade pki-kraUpgrade jackson-coreUpgrade jss-javadocUpgrade resteasyUpgrade xml-commons-apisUpgrade python3-pkiUpgrade pki-servlet-engineUpgrade pki-toolsUpgrade ldapjdk-javadocUpgrade xsomUpgrade velocityUpgrade jackson-module-jaxb-annotationsUpgrade pki-serverUpgrade relaxngDatatypeUpgrade glassfish-jaxb-apiUpgrade jakarta-commons-httpclientUpgrade xml-commons-resolverUpgrade ldapjdkUpgrade pki-baseUpgrade glassfish-jaxb-runtimeUpgrade pki-caUpgrade python3-nssUpgrade jssUpgrade glassfish-jaxb-txw2Upgrade jackson-databindUpgrade xerces-j2Upgrade pki-base-javaUpgrade apache-commons-collectionsUpgrade bea-stax-apiUpgrade pki-symkeyUpgrade xalan-j2Upgrade python-nss-docUpgrade pki-servlet-4.0-apiUpgrade javassistUpgrade xmlstreambufferUpgrade glassfish-fastinfosetUpgrade javassist-javadocUpgrade glassfish-jaxb-core | Jul 22, 2024 | Sep 15, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 15, 2019 |
| Red_hat Jboss_eap | — | — | Mar 12, 2021 | Sep 15, 2019 |
| Redhat_linux | — | Upgrade javassistUpgrade python3-pkiUpgrade javassist-javadocUpgrade pki-servlet-engineUpgrade jackson-module-jaxb-annotationsUpgrade apache-commons-langUpgrade ldapjdkUpgrade glassfish-jaxb-apiUpgrade glassfish-fastinfosetUpgrade velocityUpgrade bea-stax-apiUpgrade xml-commons-apisUpgrade pki-tools-debuginfoUpgrade pki-kraUpgrade tomcatjssUpgrade pki-base-javaUpgrade glassfish-jaxb-coreUpgrade xerces-j2Upgrade xmlstreambufferUpgrade jackson-databindUpgrade pki-symkey-debuginfoUpgrade jss-javadocUpgrade jackson-jaxrs-json-providerUpgrade resteasyUpgrade jakarta-commons-httpclientUpgrade pki-baseUpgrade stax-exUpgrade ldapjdk-javadocUpgrade python-nss-docUpgrade jss-debuginfoUpgrade glassfish-jaxb-txw2Upgrade pki-caUpgrade jss-debugsourceUpgrade pki-serverUpgrade apache-commons-collectionsUpgrade xsomUpgrade jackson-jaxrs-providersUpgrade xalan-j2Upgrade pki-toolsUpgrade pki-core-debugsourceUpgrade slf4jUpgrade jssUpgrade pki-symkeyUpgrade jackson-coreUpgrade jackson-annotationsUpgrade pki-core-debuginfoUpgrade python-nss-debugsourceUpgrade xml-commons-resolverUpgrade python3-nssUpgrade relaxngDatatypeUpgrade slf4j-jdk14Upgrade python3-nss-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade pki-servlet-4.0-api | Apr 29, 2020 | Sep 15, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python-nss-debugsource | Mar 12, 2024 | Sep 15, 2019 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Sep 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub