A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade apache-commons-collectionsUpgrade stax-exUpgrade python3-nssUpgrade glassfish-jaxb-coreUpgrade xsomUpgrade python-nss-docUpgrade velocityUpgrade javassist-javadocUpgrade javassistUpgrade glassfish-jaxb-txw2Upgrade jakarta-commons-httpclientUpgrade slf4j-jdk14Upgrade jackson-databindUpgrade jackson-module-jaxb-annotationsUpgrade xml-commons-apisUpgrade xmlstreambufferUpgrade jackson-jaxrs-json-providerUpgrade apache-commons-langUpgrade xalan-j2Upgrade jackson-jaxrs-providersUpgrade bea-stax-apiUpgrade slf4jUpgrade xml-commons-resolverUpgrade jackson-annotationsUpgrade glassfish-jaxb-apiUpgrade jackson-coreUpgrade relaxngDatatypeUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-runtimeUpgrade xerces-j2 | May 4, 2022 | Sep 15, 2019 |
| Centos_linux | — | Upgrade pki-serverUpgrade jackson-module-jaxb-annotationsUpgrade apache-commons-collectionsUpgrade javassist-javadocUpgrade slf4jUpgrade jss-debuginfoUpgrade pki-toolsUpgrade xsomUpgrade jssUpgrade jakarta-commons-httpclientUpgrade jss-debugsourceUpgrade javassistUpgrade xalan-j2Upgrade jackson-annotationsUpgrade python-nss-docUpgrade pki-symkey-debuginfoUpgrade python3-nss-debuginfoUpgrade relaxngDatatypeUpgrade pki-kraUpgrade pki-symkeyUpgrade python-nss-debugsourceUpgrade pki-base-javaUpgrade pki-caUpgrade pki-servlet-4.0-apiUpgrade ldapjdk-javadocUpgrade jackson-jaxrs-json-providerUpgrade glassfish-fastinfosetUpgrade bea-stax-apiUpgrade pki-baseUpgrade glassfish-jaxb-runtimeUpgrade glassfish-jaxb-coreUpgrade xerces-j2Upgrade python3-pkiUpgrade xmlstreambufferUpgrade pki-core-debugsourceUpgrade glassfish-jaxb-apiUpgrade glassfish-jaxb-txw2Upgrade jackson-coreUpgrade stax-exUpgrade pki-tools-debuginfoUpgrade tomcatjssUpgrade slf4j-jdk14Upgrade xml-commons-apisUpgrade pki-core-debuginfoUpgrade xml-commons-resolverUpgrade resteasyUpgrade apache-commons-langUpgrade velocityUpgrade jackson-jaxrs-providersUpgrade ldapjdkUpgrade jss-javadocUpgrade jackson-databindUpgrade python3-nssUpgrade pki-servlet-engine | Apr 29, 2020 | Sep 15, 2019 |
| Debian | — | Upgrade jackson-databind | Oct 4, 2019 | Sep 15, 2019 |
| Oracle_linux | — | Upgrade ldapjdk-javadocUpgrade velocityUpgrade jackson-coreUpgrade pki-servlet-engineUpgrade pki-toolsUpgrade jackson-annotationsUpgrade relaxngDatatypeUpgrade stax-exUpgrade slf4jUpgrade python3-pkiUpgrade xml-commons-apisUpgrade jss-javadocUpgrade jackson-jaxrs-providersUpgrade pki-kraUpgrade jackson-jaxrs-json-providerUpgrade apache-commons-langUpgrade tomcatjssUpgrade slf4j-jdk14Upgrade glassfish-jaxb-apiUpgrade xsomUpgrade resteasyUpgrade jackson-module-jaxb-annotationsUpgrade pki-serverUpgrade pki-caUpgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-txw2Upgrade bea-stax-apiUpgrade pki-servlet-4.0-apiUpgrade jackson-databindUpgrade xml-commons-resolverUpgrade javassistUpgrade xalan-j2Upgrade python-nss-docUpgrade pki-base-javaUpgrade pki-baseUpgrade glassfish-jaxb-runtimeUpgrade ldapjdkUpgrade javassist-javadocUpgrade python3-nssUpgrade glassfish-fastinfosetUpgrade xmlstreambufferUpgrade jakarta-commons-httpclientUpgrade pki-symkeyUpgrade jssUpgrade xerces-j2Upgrade apache-commons-collections | Jul 22, 2024 | Sep 15, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 15, 2019 |
| Red_hat Jboss_eap | — | — | Mar 12, 2021 | Sep 15, 2019 |
| Redhat_linux | — | Upgrade slf4jUpgrade pki-core-debugsourceUpgrade jackson-annotationsUpgrade pki-serverUpgrade pki-symkeyUpgrade python3-nss-debuginfoUpgrade relaxngDatatypeUpgrade jackson-jaxrs-providersUpgrade xalan-j2Upgrade slf4j-jdk14Upgrade python3-nssUpgrade python-nss-docUpgrade python-nss-debugsourceUpgrade jackson-coreUpgrade jss-debugsourceUpgrade xml-commons-resolverUpgrade pki-toolsUpgrade jssUpgrade xsomUpgrade pki-core-debuginfoUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-runtimeUpgrade pki-servlet-4.0-apiUpgrade pki-caUpgrade glassfish-jaxb-txw2Upgrade jss-debuginfoUpgrade glassfish-fastinfosetUpgrade pki-tools-debuginfoUpgrade velocityUpgrade xml-commons-apisUpgrade glassfish-jaxb-apiUpgrade apache-commons-langUpgrade jackson-jaxrs-json-providerUpgrade pki-symkey-debuginfoUpgrade ldapjdkUpgrade glassfish-jaxb-coreUpgrade stax-exUpgrade jackson-module-jaxb-annotationsUpgrade tomcatjssUpgrade ldapjdk-javadocUpgrade pki-kraUpgrade javassistUpgrade bea-stax-apiUpgrade pki-base-javaUpgrade pki-baseUpgrade python3-pkiUpgrade javassist-javadocUpgrade resteasyUpgrade jss-javadocUpgrade xerces-j2Upgrade xmlstreambufferUpgrade jakarta-commons-httpclientUpgrade jackson-databindUpgrade pki-servlet-engine | Apr 29, 2020 | Sep 15, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfo | Mar 12, 2024 | Sep 15, 2019 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Sep 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub