fasterxml Vulnerability Advisory Catalog

Total 79 security vulnerabilities recorded for fasterxml software and firmware.

← Back to All Vendors
Component: jackson-modules-java8

Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a...

📅 2018-12-20
CVSS 6.5 Dossier →
CVE-2018-7489 CRITICAL
Component: jackson-databind

FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an inc...

📅 2018-02-26
CVSS 9.8 Dossier →
CVE-2017-7525 CRITICAL
Component: jackson-databind

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user t...

📅 2018-02-06
CVSS 9.8 Dossier →
CVE-2017-15095 CRITICAL
Component: jackson-databind

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perfor...

📅 2018-02-06
CVSS 9.8 Dossier →
Component: jackson-databind

FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CV...

📅 2018-01-22
CVSS 8.1 Dossier →
CVE-2017-17485 CRITICAL
Component: jackson-databind

FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CV...

📅 2018-01-10
CVSS 9.8 Dossier →
Component: jackson-dataformat-xml

XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct ...

📅 2017-04-14
CVSS 8.6 Dossier →
Page 4 of 4 (79 Total Records)