aero.champ:cargojson (1.0), ai.genauth:genauth-java-sdk (3.1.11) +14747 more potentially affected by CVE-2018-14720 via com.fasterxml.jackson.core:jackson-databind (>=2.9.0, <=2.9.6)

🗓️ 04 Jan 2019 19:09:46Reported by Vulners OSVType

vulnersosv🔗 github.com👁 2 Views

Vulnerability in jackson-databind via transitive dependencies in various libraries.

Reporter	Title	Published	Views	Family All 192
IBM Security Bulletins	Security Bulletin: Vulnerabilities in jackson-databind affect IBM watsonx.data	18 Sep 202416:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by Components with known vulnerabilities	6 Oct 202112:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jackson-databind affects IBM Process Mining (Multiple CVEs)	1 Feb 202321:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple CVEs affect IBM Integration Designer	1 Feb 202319:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	12 Jan 202114:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a jackson-databind vulnerabilities	1 Oct 201919:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by jackson-databind vulnerabilities	26 Apr 201916:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in jackson-databind affect IBM watsonx.data	4 Feb 202518:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in jackson-databind affect IBM Platform Symphony and IBM Spectrum Symphony	19 Jun 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: z/Transaction Processing Facility is affected by multiple vulnerabilities in the jackson-databind, jackson-dataformat-xml, jackson-core, slf4j-ext, and cxf-core packages	10 Oct 202222:34	–	ibm

12 Jun 2023 22:34Current

CVSS 27.5

CVSS 39.8

EPSS0.07524

jackson-databind transitive dependency