FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade jackson-jaxrs-providersUpgrade xerces-j2Upgrade apache-commons-langUpgrade relaxngDatatypeUpgrade xml-commons-resolverUpgrade jackson-module-jaxb-annotationsUpgrade xmlstreambufferUpgrade xsomUpgrade python3-nssUpgrade slf4j-jdk14Upgrade glassfish-jaxb-runtimeUpgrade glassfish-jaxb-txw2Upgrade jackson-databindUpgrade jackson-coreUpgrade python-nss-docUpgrade xml-commons-apisUpgrade jackson-jaxrs-json-providerUpgrade jackson-annotationsUpgrade velocityUpgrade bea-stax-apiUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-coreUpgrade slf4jUpgrade javassist-javadocUpgrade javassistUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-apiUpgrade jakarta-commons-httpclientUpgrade stax-exUpgrade xalan-j2 | May 4, 2022 | Jan 3, 2020 |
| Centos_linux | — | Upgrade python-nss-debugsourceUpgrade jssUpgrade pki-caUpgrade pki-servlet-4.0-apiUpgrade jackson-coreUpgrade velocityUpgrade bea-stax-apiUpgrade stax-exUpgrade apache-commons-collectionsUpgrade python-nss-docUpgrade pki-tools-debuginfoUpgrade python3-nssUpgrade pki-symkeyUpgrade slf4j-jdk14Upgrade pki-symkey-debuginfoUpgrade jackson-jaxrs-providersUpgrade pki-kraUpgrade pki-baseUpgrade glassfish-jaxb-runtimeUpgrade jss-debuginfoUpgrade pki-base-javaUpgrade xml-commons-resolverUpgrade pki-servlet-engineUpgrade pki-core-debugsourceUpgrade glassfish-fastinfosetUpgrade resteasyUpgrade pki-serverUpgrade ldapjdk-javadocUpgrade xml-commons-apisUpgrade jackson-databindUpgrade glassfish-jaxb-apiUpgrade xmlstreambufferUpgrade xerces-j2Upgrade ldapjdkUpgrade jss-javadocUpgrade apache-commons-langUpgrade glassfish-jaxb-txw2Upgrade python3-pkiUpgrade tomcatjssUpgrade xsomUpgrade jakarta-commons-httpclientUpgrade pki-toolsUpgrade jackson-annotationsUpgrade glassfish-jaxb-coreUpgrade javassist-javadocUpgrade xalan-j2Upgrade jackson-module-jaxb-annotationsUpgrade jackson-jaxrs-json-providerUpgrade pki-core-debuginfoUpgrade javassistUpgrade python3-nss-debuginfoUpgrade jss-debugsourceUpgrade relaxngDatatypeUpgrade slf4j | Feb 8, 2021 | Jan 3, 2020 |
| Debian | — | Upgrade jackson-databind | Feb 24, 2020 | Jan 3, 2020 |
| Redhat_linux | — | Upgrade pki-symkeyUpgrade xsomUpgrade python3-nss-debuginfoUpgrade pki-symkey-debuginfoUpgrade jss-debugsourceUpgrade pki-toolsUpgrade javassist-javadocUpgrade glassfish-jaxb-coreUpgrade javassistUpgrade jakarta-commons-httpclientUpgrade slf4jUpgrade pki-servlet-engineUpgrade python3-nssUpgrade python-nss-debugsourceUpgrade apache-commons-collectionsUpgrade jss-debuginfoUpgrade jssUpgrade ldapjdk-javadocUpgrade stax-exUpgrade python-nss-docUpgrade glassfish-jaxb-txw2Upgrade pki-caUpgrade xerces-j2Upgrade xalan-j2Upgrade apache-commons-langUpgrade xmlstreambufferUpgrade jss-javadocUpgrade pki-core-debuginfoUpgrade slf4j-jdk14Upgrade jackson-jaxrs-json-providerUpgrade jackson-coreUpgrade xml-commons-resolverUpgrade xml-commons-apisUpgrade resteasyUpgrade jackson-annotationsUpgrade pki-serverUpgrade jackson-databindUpgrade bea-stax-apiUpgrade pki-kraUpgrade glassfish-jaxb-apiUpgrade tomcatjssUpgrade pki-baseUpgrade glassfish-jaxb-runtimeUpgrade jackson-jaxrs-providersUpgrade pki-base-javaUpgrade jackson-module-jaxb-annotationsUpgrade pki-tools-debuginfoUpgrade relaxngDatatypeUpgrade ldapjdkUpgrade python3-pkiUpgrade glassfish-fastinfosetUpgrade pki-servlet-4.0-apiUpgrade pki-core-debugsourceUpgrade velocity | Feb 8, 2021 | Jan 3, 2020 |
| Rocky_linux | — | Upgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Jan 3, 2020 |
| Suse | — | Upgrade jackson-databind | Feb 4, 2022 | Jan 3, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Jan 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub