Lucene search
+L

EUVD-2026-38589

🗓️ 23 Jun 2026 20:47:22Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 37 Views

Fixed JsonView bypass in Jackson databind where setterless properties ignored the active view, exposing guarded collections.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
freebsd
FreeBSD
jackson-databind -- multiple vulnerabilities
28 May 202600:00
–freebsd
ibm
IBM Security Bulletins
Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs
12 Aug 202620:39
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Vulnerability in jackson-databind affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
2 Nov 202614:04
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Security vulnerabilities have been detected in IBM Security Verify Governance Identity Manager Adapters
13 Jul 202606:22
–ibm
ibm
IBM Security Bulletins
Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in Jackson Databind
16 Oct 202617:59
–ibm
ibm
IBM Security Bulletins
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities
27 Oct 202618:35
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind
29 Jul 202614:19
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.
24 Oct 202604:15
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
8 Jul 202616:15
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Jackson databind security vulnerability in IBM Content Cortex reported for ACCE, GraphQL, External-Share
17 Sep 202612:48
–ibm
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "dcb8f4ba-697c-3db3-b8d4-0d19990e277f",
        "vendor": {
          "name": "FasterXML"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4fdb12f2-62cb-3a98-a33e-1d6b2e862ff0",
        "product": {
          "name": "jackson-databind",
          "vendor": {
            "name": "n/a"
          }
        },
        "product_version": "2.21.0, < 2.21.4"
      },
      {
        "id": "9cd84569-f256-3969-9de2-2ed94231edc5",
        "product": {
          "name": "jackson-databind",
          "vendor": {
            "name": "n/a"
          }
        },
        "product_version": "3.0.0, < 3.1.4"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation