FasterXML

Records108All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high62CVSS 7.0–8.9

Exploited now

FasterXML records in CISA KEV

No FasterXML vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jackson-databind 78 records HIGH Jackson-dataformat-xml 2 records MEDIUM Jackson-core 1 record MEDIUM Jackson-dataformats-binary 1 record LOW Jackson-dataformats-text 1 record MEDIUM Jackson-mapper-asl 1 record MEDIUM Jackson-modules-java8 1 record LOW Woodstox 1 record HIGH

Records

1 record in Jackson-dataformats-binary · all components

TI-2020-17296 CVE-2020-28491 · GHSA-xmc8-26q4-qjhx

Denial of service (DoS) in com.fasterxml.jackson.dataformat:jackson-dataformat-cbor

LOW 37

This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02417 Published 2021-02-18 Partial fix · 2.11.4, 2.12.1 CWE-770

Open these records in search →