Lucene search
+L

7 matches found

Atlassian
Atlassian
added 2024/04/09 1:50 a.m.59 views

Injection com.fasterxml.jackson.core:jackson-databind Dependency in Crowd Data Center and Server

This High severity com.fasterxml.jackson.core:jackson-databind Dependency vulnerability was introduced in versions 5.0.0, 5.1.0, and 5.2.0 of Crowd Data Center and Server. This com.fasterxml.jackson.core:jackson-databind Dependency vulnerability, with a CVSS Score of 8.8 and a CVSS Vector of...

8.8CVSS6.5AI score0.03059EPSS
SaveExploits0
NVD
NVD
added 2020/03/18 10:15 p.m.37 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS9AI score0.03059EPSS
SaveExploits0References8
OSV
OSV
added 2020/03/18 10:15 p.m.23 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS6.5AI score
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2020/03/18 10:15 p.m.38 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS6.9AI score0.03059EPSS
SaveExploits0References4
Prion
Prion
added 2020/03/18 10:15 p.m.24 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

6.8CVSS9AI score0.03059EPSS
SaveExploits0References8Affected Software30
Cvelist
Cvelist
added 2020/03/18 9:17 p.m.41 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

9.1AI score0.03059EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2020/03/18 9:17 p.m.29 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

6.7AI score0.03059EPSS
SaveExploits0References8
Rows per page
Query Builder