Lucene search
+L

6 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2020/10/14 12:51 p.m.•42 views

Security Bulletin: Netcool Operations Insight component IBM Network Performance Insight 1.3.1 affected by CVE-2020-14062

Summary Netcool Operations Insight component IBM Network Performance Insight 1.3.1 affected by CVE-2020-14062 Vulnerability Details CVEID: CVE-2020-14062 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe...

8.1CVSS1.6AI score0.08108EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
•added 2020/06/18 2:44 p.m.•91 views

Deserialization of untrusted data in Jackson Databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

8.1CVSS3.2AI score0.08108EPSS
SaveExploits0References15Affected Software1
UbuntuCve
UbuntuCve
•added 2020/06/14 8:15 p.m.•54 views

CVE-2020-14062

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

8.1CVSS6.8AI score0.08108EPSS
SaveExploits0References4
Prion
Prion
•added 2020/06/14 8:15 p.m.•32 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

6.8CVSS8.6AI score0.08108EPSS
SaveExploits0References9Affected Software12
Mend
Mend
•added 2020/06/14 7:42 p.m.•6 views

CVE-2020-14062

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

9.2CVSS0.08108EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/14 12:00 a.m.•5 views

CVE-2020-14062: Deserialization of Untrusted Data

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

8.1CVSS5.9AI score0.08108EPSS
SaveExploits0References20
Rows per page
Query Builder