CVE-2019-20330
Published Jan 3, 2020FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
Vendor/product archive
oracle / siebel_engineering_-_installer_&_deployment CVEs
Beta · best-effort7 CVEs tagged to oracle / siebel_engineering_-_installer_&_deployment — 6 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.
CVE-2019-17531
Published Oct 12, 2019A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an ex…
CVE-2019-16943
Published Oct 1, 2019A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an ex…
CVE-2019-16942
Published Oct 1, 2019A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an ex…
CVE-2019-14439
Published Jul 30, 2019A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property)…
CVE-2019-14379
Published Jul 29, 2019SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransaction…
CVE-2018-14718
Published Jan 2, 2019FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserializat…
Showing 1-7 of 7 CVEsPage 1 of 1