Lucene search
+L

7 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2020/10/14 12:51 p.m.•45 views

Security Bulletin: Netcool Operations Insight component IBM Network Performance Insight 1.3.1 affected by CVE-2020-14062

Summary Netcool Operations Insight component IBM Network Performance Insight 1.3.1 affected by CVE-2020-14062 Vulnerability Details CVEID: CVE-2020-14062 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe...

8.1CVSS1.6AI score0.08108EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
•added 2020/06/18 2:44 p.m.•94 views

Deserialization of untrusted data in Jackson Databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

8.1CVSS3.2AI score0.08108EPSS
SaveExploits0References15Affected Software1
Prion
Prion
•added 2020/06/14 8:15 p.m.•33 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

6.8CVSS8.6AI score0.08108EPSS
SaveExploits0References9Affected Software12
UbuntuCve
UbuntuCve
•added 2020/06/14 8:15 p.m.•56 views

CVE-2020-14062

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

8.1CVSS6.8AI score0.08108EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2020/06/14 7:42 p.m.•5 views

CVE-2020-14062

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

0.08108EPSS
SaveExploits0References9
Mend
Mend
•added 2020/06/14 7:42 p.m.•6 views

CVE-2020-14062

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

9.2CVSS0.08108EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/14 12:00 a.m.•6 views

CVE-2020-14062: Deserialization of Untrusted Data

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

8.1CVSS5.9AI score0.08108EPSS
SaveExploits0References20
Rows per page
Query Builder