EUVD-2025-17366

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Flaw in jackson-core leaks memory content in exception messages, fixed in version 2.13.0.

Reporter	Title	Published	Views	Family All 85
0day.today	ElasticSearch 7.13.3 - Memory disclosure Exploit	23 Jul 202100:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities affecting IBM Knowledge Catalog Premium Cartridge	11 Mar 202619:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager for ACH Services and Check Services is impacted by multiple vulnerabilities	9 Feb 202615:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities - Elasticsearch ( CVE-2021-22144, CVE-2021-22145, CVE-2021-22147)	15 Dec 202108:13	–	ibm
IBM Security Bulletins	Security Bulletin: Operations Dashboard is vulnerable to Elasticsearch Go vulnerabilities (CVE-2021-22144 & CVE-2021-22145)	14 Oct 202113:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in jackson-core-2.10.3.jar	3 Oct 202518:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM webMethods Integration Server	11 Feb 202607:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis is affected by Information Disclosure, Buffer Overflow and Denial of Service (DoS) due to Java JSON library ('Jackson')	6 Apr 202618:21	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.10 addresses multiple security vulnerabilities.	27 Sep 202321:11	–	ibm
Tenable Nessus	Amazon Linux 2023 : aws-kinesis-agent (ALAS2023-2025-1024)	23 Jun 202500:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "d6f239b7-27f5-3425-a517-a9762f5c4c43",
        "vendor": {
          "name": "FasterXML"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "b19991d9-b67b-3ab1-9562-d8c6919e7712",
        "product": {
          "name": "jackson-core"
        },
        "product_version": "2.0.0, < 2.13.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/FasterXML/jackson-core/security/advisories/GHSA-wf8f-6423-gfxg
github	www.github.com/FasterXML/jackson-core/pull/652
github	www.github.com/FasterXML/jackson-core/commit/a6c297682737dde13337cb7c3020f299518609a8
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-22145
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-49128

03 Oct 2025 20:07Current

7.2High risk

Vulners AI Score7.2

CVSS 3.14 - 6.5

CVSS 24

EPSS0.67928

SSVC