oracle / utilities_advanced_spatial_and_operational_analytics CVEs

Beta · best-effort

3 CVEs tagged to oracle / utilities_advanced_spatial_and_operational_analytics — 3 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to oracle vendor archive

CVE-2018-11307

Published Jul 9, 2019

An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixe…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2017-7525

Published Feb 6, 2018

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by s…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2017-15095

Published Feb 6, 2018

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending t…

CVSS 9.8 · Critical

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1