CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

24 matches found

OSV•added 2020/03/02 4:15 a.m.•0 views

UBUNTU-CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS7.2AI score0.38262EPSS

Exploits0References5

UbuntuCve•added 2020/03/02 4:15 a.m.•44 views

CVE-2020-9547

9.8CVSS7.1AI score0.38262EPSS

Exploits0References4

CVE•added 2020/03/02 3:59 a.m.•527 views

CVE-2020-9547

The CVE refers to FasterXML jackson-databind 2.x prior to 2.9.10.4, where handling of serialization gadgets and typing leads to deserialization vulnerabilities. The vulnerability affects the jackson-databind component (IBM/Oracle/NVD context lists critical impacts to confidentiality, integrity, a...

9.8CVSS9.1AI score0.38262EPSS

In wildExploits0References23Affected Software1