ai.grakn:grakn-dist (>=0.7.0, <=0.17.0), ai.grakn:grakn-engine (>=0.6.1, <=0.18.0) +1010 more potentially affected by CVE-2016-7051 via com.fasterxml.jackson.dataformat:jackson-dataformat-xml (>=2.0.0-rc2, <=2.7.7)

com.fasterxml.jackson.dataformat:jackson-dataformat-xml MAVEN version =2.0.0-rc2, =0.7.0, =0.6.1, =0.6.1, =0.7.0, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.16.0, =0.1.0, =0.1-12, =0.1-12, =0.1-12, =0.1-16 and more Source cves: CVE-2016-7051 Source advisory: GHSA-7C2R-3JQF-C9RW...

jackson-dataformat-xml vulnerable to server side request forgery (SSRF)

Versions of jackson-dataformat-xml prior to 2.7.8 and prior to 2.8.4 allow remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

cn.home1:oss-eureka (>=1.0.6.oss, <=1.0.7.oss), com.ahome-it:ahome-tooling-server-core (>=1.1.4-release, <=1.1.16-release) +172 more potentially affected by CVE-2016-7051 via com.fasterxml.jackson.dataformat:jackson-dataformat-xml (>=2.8.0, <=2.8.3)

com.fasterxml.jackson.dataformat:jackson-dataformat-xml MAVEN version =2.8.0, =1.0.6.oss, =1.1.4-release, =1.1.4-release, =1.1.4-release, =1.1.4-release, =1.1.4-release, =1.1.8-release, =0.0.1, =3.1, =3.5.1 and more Source cves: CVE-2016-7051 Source advisory: GHSA-7C2R-3JQF-C9RW...

GHSA-7C2R-3JQF-C9RW jackson-dataformat-xml vulnerable to server side request forgery (SSRF)

Versions of jackson-dataformat-xml prior to 2.7.8 and prior to 2.8.4 allow remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

cn.home1:oss-eureka (>=1.0.6.oss, <=1.0.7.oss), com.ahome-it:ahome-tooling-server-core (>=1.1.4-release, <=1.1.16-release) +172 more potentially affected by CVE-2016-7051 via com.fasterxml.jackson.dataformat:jackson-dataformat-xml (>=2.8.0, <=2.8.3)

com.fasterxml.jackson.dataformat:jackson-dataformat-xml MAVEN version =2.8.0, =1.0.6.oss, =1.1.4-release, =1.1.4-release, =1.1.4-release, =1.1.4-release, =1.1.4-release, =1.1.8-release, =0.0.1, =3.1, =3.5.1 and more Source cves: CVE-2016-7051 Source advisory: OSV:GHSA-7C2R-3JQF-C9RW...

ai.grakn:grakn-dist (>=0.7.0, <=0.17.0), ai.grakn:grakn-engine (>=0.6.1, <=0.18.0) +1010 more potentially affected by CVE-2016-7051 via com.fasterxml.jackson.dataformat:jackson-dataformat-xml (>=2.0.0-rc2, <=2.7.7)

com.fasterxml.jackson.dataformat:jackson-dataformat-xml MAVEN version =2.0.0-rc2, =0.7.0, =0.6.1, =0.6.1, =0.7.0, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.16.0, =0.1.0, =0.1-12, =0.1-12, =0.1-12, =0.1-16 and more Source cves: CVE-2016-7051 Source advisory: OSV:GHSA-7C2R-3JQF-C9RW...

ai.grakn:grakn-dist (>=0.7.0, <=0.17.0), ai.grakn:grakn-engine (>=0.6.1, <=0.18.0) +969 more potentially affected by CVE-2016-3720 via com.fasterxml.jackson.dataformat:jackson-dataformat-xml (>=2.0.0-rc2, <=2.7.3)

com.fasterxml.jackson.dataformat:jackson-dataformat-xml MAVEN version =2.0.0-rc2, =0.7.0, =0.6.1, =0.6.1, =0.7.0, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.16.0, =0.1.0, =0.1-12, =0.1-12, =0.1-12, =0.1-16 and more Source cves: CVE-2016-3720 Source advisory: GHSA-HMQ6-FRV3-4727...

ai.grakn:grakn-dist (>=0.7.0, <=0.17.0), ai.grakn:grakn-engine (>=0.6.1, <=0.18.0) +969 more potentially affected by CVE-2016-3720 via com.fasterxml.jackson.dataformat:jackson-dataformat-xml (>=2.0.0-rc2, <=2.7.3)

com.fasterxml.jackson.dataformat:jackson-dataformat-xml MAVEN version =2.0.0-rc2, =0.7.0, =0.6.1, =0.6.1, =0.7.0, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.16.0, =0.1.0, =0.1-12, =0.1-12, =0.1-12, =0.1-16 and more Source cves: CVE-2016-3720 Source advisory: OSV:GHSA-HMQ6-FRV3-4727...

GHSA-HMQ6-FRV3-4727 jackson-dataformat-xml vulnerable to XML external entity (XXE)

XML external entity XXE vulnerability in XmlMapper in the Data format extension for Jackson aka jackson-dataformat-xml allows attackers to have unspecified impact via unknown vectors...

DEBIAN-CVE-2016-7051

XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

Server side request forgery (ssrf)

XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

CVE-2016-7051

XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

CVE-2016-7051

CVE-2016-7051 affects jackson-dataformat-xml (XmlMapper). The vulnerability is a server-side request forgery (SSRF) flaw related to DTD handling, present in XmlMapper before 2.7.8 and in 2.8.x before 2.8.4. Impact is described as potential SSRF; exploit details are not provided in the initial doc...

CVE-2016-7051

XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

cn.home1:oss-eureka (>=1.0.6.oss, <=1.0.7.oss), com.ahome-it:ahome-tooling-server-core (>=1.1.4-release, <=1.1.16-release) +172 more potentially affected by CVE-2016-7051 via com.fasterxml.jackson.dataformat:jackson-dataformat-xml (>=2.8.0, <=2.8.3)

com.fasterxml.jackson.dataformat:jackson-dataformat-xml MAVEN version =2.8.0, =1.0.6.oss, =1.1.4-release, =1.1.4-release, =1.1.4-release, =1.1.4-release, =1.1.4-release, =1.1.8-release, =0.0.1, =3.1, =3.5.1 and more Source cves: CVE-2016-7051 Source advisory: MEND:CVE-2016-7051...

ai.grakn:grakn-dist (>=0.7.0, <=0.17.0), ai.grakn:grakn-engine (>=0.6.1, <=0.18.0) +1010 more potentially affected by CVE-2016-7051 via com.fasterxml.jackson.dataformat:jackson-dataformat-xml (>=2.0.0-rc2, <=2.7.7)

com.fasterxml.jackson.dataformat:jackson-dataformat-xml MAVEN version =2.0.0-rc2, =0.7.0, =0.6.1, =0.6.1, =0.7.0, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.16.0, =0.1.0, =0.1-12, =0.1-12, =0.1-12, =0.1-16 and more Source cves: CVE-2016-7051 Source advisory: MEND:CVE-2016-7051...

CVE-2016-7051

XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

PT-2017-9078

Name of the Vulnerable Software and Affected Versions jackson-dataformat-xml versions 2.7.0 through 2.7.7 jackson-dataformat-xml versions 2.8.0 through 2.8.3 Description The issue allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD. This can be...

CVE-2016-7051: Improper Restriction of XML External Entity Reference

XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

Fedora 22 : jackson-dataformat-xml (2016-d708261ce2)

Security fix for CVE-2016-3720 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...