FasterXML

Records108All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high62CVSS 7.0–8.9

Exploited now

FasterXML records in CISA KEV

No FasterXML vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jackson-databind 78 records HIGH Jackson-dataformat-xml 2 records MEDIUM Jackson-core 1 record MEDIUM Jackson-dataformats-binary 1 record LOW Jackson-dataformats-text 1 record MEDIUM Jackson-mapper-asl 1 record MEDIUM Jackson-modules-java8 1 record LOW Woodstox 1 record HIGH

Records

2 records in Jackson-dataformat-xml · all components

TI-2016-03149 CVE-2016-3720 · GHSA-hmq6-frv3-4727

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for…

MEDIUM 47

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0278 Published 2016-06-10 Fixed in 2.7.4 CWE-611

TI-2016-06061 CVE-2016-7051 · GHSA-7c2r-3jqf-c9rw

XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before…

MEDIUM 42

XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery (SSRF) attacks via vectors related to a DT…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02356 Published 2017-04-14 Fixed in 2.7.8, 2.8.4 CWE-611

Open these records in search →

Critical	28
High	62
Medium	17
Low	0
No CVSS	1