GL
Product
Global Lifecycle Management Opatch
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 12Medium 3Low 0
Watch
Add Global Lifecycle Management Opatch to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-9546 | 9.8 | Mar 2 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to… Affected: before 12.2.0.1.20 |
| CVE-2020-9547 | 9.8 | Mar 2 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to… Affected: before 12.2.0.1.20 |
| CVE-2020-9548 | 9.8 | Mar 2 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka… Affected: before 12.2.0.1.20 |
| CVE-2020-8840 | 9.8 | Feb 10 | FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter Affected: before 11.2.0.3.23; 12.2.0.1.0 before 12.2.0.1.19; 13.9.4.0.0 before 13.9.4.2.1 |
| CVE-2019-20330 | 9.8 | Jan 3 | FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking Affected: before 11.2.0.3.23; 12.2.0.1.0 before 12.2.0.1.19; 13.9.4.0.0 before 13.9.4.2.1 |
| CVE-2019-16335 | 9.8 | Sep 15 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10 Affected: before 11.2.0.3.23; 12.2.0.1.0 before 12.2.0.1.19; 13.9.4.0.0 before 13.9.4.2.1 |
| CVE-2019-14540 | 9.8 | Sep 15 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10 Affected: before 11.2.0.3.23; 12.2.0.1.0 before 12.2.0.1.19; 13.9.4.0.0 before 13.9.4.2.1 |
| CVE-2018-11307 | 9.8 | Jul 9 | An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5 Affected: before 11.2.0.3.23; 12.2.0.1.0 before 12.2.0.1.19; 13.9.4.0.0 before 13.9.4.2.1 |
| CVE-2018-14719 | 9.8 | Jan 2 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from… Affected: before 11.2.0.3.23; 12.2.0.1.0 before 12.2.0.1.19; 13.9.4.0.0 before 13.9.4.2.1 |
| CVE-2018-14718 | 9.8 | Jan 2 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic… Affected: before 11.2.0.3.23; 12.2.0.1.0 before 12.2.0.1.19; 13.9.4.0.0 before 13.9.4.2.1 |
Showing 10