CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

25 matches found

ATTACKERKB•added 2020/03/02 4:15 a.m.•5 views

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS7.4AI score0.17757EPSS

SaveExploits0References42

OSV•added 2020/03/02 4:15 a.m.•23 views

UBUNTU-CVE-2020-9547

9.8CVSS7.2AI score0.17757EPSS

SaveExploits0References5

UbuntuCve•added 2020/03/02 4:15 a.m.•54 views

CVE-2020-9547

9.8CVSS7.1AI score0.17757EPSS

SaveExploits0References4

CVE•added 2020/03/02 3:59 a.m.•582 views

CVE-2020-9547

CVE-2020-9547 involves jackson-databind 2.x before 2.9.10.4 where deserialization gadget typing interaction (related to ibatis-sqlmap) enables likely remote code execution. Connected IBM advisories enumerate multiple CBEs in jackson-databind and show affected IBM products; remediation guidance ge...

9.8CVSS9.1AI score0.17757EPSS

SaveIn wildExploits0References23Affected Software1

Cvelist•added 2020/03/02 3:59 a.m.•37 views

CVE-2020-9547

9.3AI score0.17757EPSS

SaveExploits0References23

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by