Fasterxml الثغرات

التسلسل الزمني

النوع

Programming Language Software68

منتج

FasterXML jackson-databind65
FasterXML jackson-dataformat-cbor1
FasterXML Jackson Databind1
FasterXML Jackson1

معالجة

Official Fix61
Temporary Fix0
Workaround0
Unavailable0
Not Defined7

قابلية الاستغلال

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined68

متجه الوصول

Not Defined0
Physical0
Local0
Adjacent13
Network55

توثيق

Not Defined0
High0
Low20
None48

تفاعل المستخدم

Not Defined0
Required8
None60

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤51
≤610
≤712
≤810
≤923
≤1010

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤51
≤610
≤714
≤812
≤919
≤1010

VulDB

≤10
≤20
≤30
≤44
≤51
≤612
≤713
≤821
≤97
≤1010

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤71
≤88
≤914
≤1026

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤90
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k3
<2k27
<5k38
<10k0
<25k0
<50k0
<100k0
≥100k0

إكسبلويت اليوم

<1k66
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (4): Jackson (1), Jackson Databind (1), jackson-databind (65), jackson-dataformat-cbor (1)

منشورBaseTempالثغرةProdق�معالجةEPSSCTICVE
14/06/20236.56.5FasterXML jackson-databind Cyclic Dependency تجاوز الصلاحياتProgramming Language SoftwareNot DefinedNot Defined0.000430.07CVE-2023-35116
27/12/20227.27.0FasterXML jackson-databind ignite-jta/quartz-core تجاوز الصلاحياتProgramming Language SoftwareNot DefinedOfficial Fix0.004020.03CVE-2020-10650
02/10/20223.53.4FasterXML jackson-databind Array BeanDeserializer._deserializeFromArray الحرمان من الخدمةProgramming Language SoftwareNot DefinedOfficial Fix0.002140.04CVE-2022-42004
02/10/20225.55.4FasterXML jackson-databind Deserialize الحرمان من الخدمةProgramming Language SoftwareNot DefinedOfficial Fix0.002050.03CVE-2022-42003
11/03/20223.53.4FasterXML jackson-databind Java الحرمان من الخدمةProgramming Language SoftwareNot DefinedOfficial Fix0.002180.00CVE-2020-36518
18/02/20215.35.1FasterXML jackson-dataformat-cbor تلف الذاكرةProgramming Language SoftwareNot DefinedOfficial Fix0.001100.02CVE-2020-28491
20/01/20216.86.5FasterXML jackson-databind تجاوز الصلاحياتProgramming Language SoftwareNot DefinedOfficial Fix0.004310.06CVE-2021-20190
07/01/20216.36.3FasterXML jackson-databind Privilege EscalationProgramming Language SoftwareNot DefinedOfficial Fix0.002620.00CVE-2020-36189
07/01/20216.36.3FasterXML jackson-databind Privilege EscalationProgramming Language SoftwareNot DefinedOfficial Fix0.002620.00CVE-2020-36188
07/01/20216.36.3FasterXML jackson-databind Privilege EscalationProgramming Language SoftwareNot DefinedOfficial Fix0.002620.00CVE-2020-36187

58 بعض الادخالات لم يتم عرضها

🔒 Login Required

You need to signup and login to see more of the remaining 58 results.

التالي ▸نظرة عامة◂ السابق

Do you want to use VulDB in your project?

Use the official API to access entries easily!