Read the docs

FasterXML

Records108All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical28CVSS 9.0–10.0
CVSS high62CVSS 7.0–8.9

Exploited now

FasterXML records in CISA KEV

No FasterXML vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jackson-databind 78 records HIGH Jackson-dataformat-xml 2 records MEDIUM Jackson-core 1 record MEDIUM Jackson-dataformats-binary 1 record LOW Jackson-dataformats-text 1 record MEDIUM Jackson-mapper-asl 1 record MEDIUM Jackson-modules-java8 1 record LOW Woodstox 1 record HIGH

Records

1 record in Woodstox · all components

TI-2022-19041 CVE-2022-40152 · GHSA-3f7h-mf4q-vrm4

Stack Buffer Overflow in Woodstox

Priority HIGH 66

Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.18215 Published 2022-09-16 Partial fix · 6.4.0, 5.4.0 CWE-121
Open these records in search →