Поиск уязвимостей
Количество 8
Количество 8
BDU:2020-04628
Уязвимость компонента weblogic/oracle-aqjms библиотеки Jackson-databind проекта FasterXML, позволяющая нарушителю выполнить произвольный код
ROS-20250710-13
Множественные уязвимости jackson-databind
CVE-2020-14061
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).
CVE-2020-14061
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).
CVE-2020-14061
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).
CVE-2020-14061
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interact ...
GHSA-c2q3-4qrh-fm48
Deserialization of untrusted data in Jackson Databind
ALT-PU-2021-1792
ALT-PU-2021-1792: package `jackson-databind` update to version 2.10.2-alt1_2jpp8
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2020-04628 Уязвимость компонента weblogic/oracle-aqjms библиотеки Jackson-databind проекта FasterXML, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.1 | 4% Низкий | больше 6 лет назад |
 | ROS-20250710-13 Множественные уязвимости jackson-databind | CVSS3: 9.8 | больше 1 года назад | |
 | CVE-2020-14061 FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms). | CVSS3: 8.1 | 4% Низкий | больше 6 лет назад |
 | CVE-2020-14061 FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms). | CVSS3: 8.1 | 4% Низкий | больше 6 лет назад |
 | CVE-2020-14061 FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms). | CVSS3: 8.1 | 4% Низкий | больше 6 лет назад |
| CVE-2020-14061 FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interact ... | CVSS3: 8.1 | 4% Низкий | больше 6 лет назад |
| GHSA-c2q3-4qrh-fm48 Deserialization of untrusted data in Jackson Databind | CVSS3: 8.1 | 4% Низкий | больше 6 лет назад |
| ALT-PU-2021-1792 ALT-PU-2021-1792: package `jackson-databind` update to version 2.10.2-alt1_2jpp8 | CVSS3: 9.8 | больше 5 лет назад |
Уязвимостей на страницу