2 matches found
SUSE CVE-2018-14718
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization...
9.8CVSS9.2AI score0.12679EPSS
SaveExploits0References2
Deserialization of untrusted data
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization...
7.5CVSS9.6AI score0.12679EPSS
SaveExploits0References35Affected Software22
20