Fasterxml Jackson Уязвимости

Временная шкала

Версия

2.9.10.0	35
2.9.10.1	35
2.9.10.2	34
2.9.10.3	33
2.9.0	24

Устранение последствий

Official Fix	61
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	7

Эксплуатационная пригодность

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	68

Вектор доступа

Not Defined	0
Physical	0
Local	0
Adjacent	13
Network	55

Аутентификация

Not Defined	0
High	0
Low	20
None	48

Взаимодействие с пользователем

Not Defined	0
Required	8
None	60

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	1
≤6	10
≤7	12
≤8	10
≤9	23
≤10	10

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	1
≤6	10
≤7	14
≤8	12
≤9	19
≤10	10

VulDB

≤1	0
≤2	0
≤3	0
≤4	4
≤5	1
≤6	12
≤7	13
≤8	21
≤9	7
≤10	10

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	1
≤8	8
≤9	14
≤10	26

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	2
≤9	0
≤10	0

Поставщик

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Эксплойт 0-дня

<1k	3
<2k	27
<5k	38
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Эксплойт сегодня

<1k	67
<2k	1
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (59): 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.6.7, 2.6.7.1, 2.6.7.2, 2.7, 2.7.9, 2.7.9.1, 2.7.9.2, 2.7.9.3, 2.8, 2.8.1, 2.8.2, 2.8.3, 2.8.4, 2.8.5, 2.8.6, 2.8.7, 2.8.8, 2.8.9, 2.8.11, 2.8.11.1, 2.8.11.2, 2.8.11.3, 2.8.11.4, 2.9, 2.9.1, 2.9.2, 2.9.3, 2.9.4, 2.9.5, 2.9.6, 2.9.7, 2.9.8, 2.9.9, 2.9.9.1, 2.9.10.1, 2.9.10.2, 2.9.10.3, 2.9.10.4, 2.9.10.5, 2.9.10.6, 2.9.10.7, 2.10, 2.11, 2.11.1, 2.11.2, 2.11.3, 2.12, 2.13, 2.13.1, 2.13.2, 2.13.3, 2.15.2

Тип программного обеспечения: Programming Language Software

Опубликовано	Base	Temp	Уязвимости	0day	Сегодня	Э�	Rem	CTI	CVE
14.06.2023	6.5	6.5	FasterXML jackson-databind Cyclic Dependency эскалация привилегий	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	CVE-2023-35116
27.12.2022	7.2	7.0	FasterXML jackson-databind ignite-jta/quartz-core эскалация привилегий	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2020-10650
02.10.2022	3.5	3.4	FasterXML jackson-databind Array BeanDeserializer._deserializeFromArray отказ в обслуживании	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-42004
02.10.2022	5.5	5.4	FasterXML jackson-databind Deserialize отказ в обслуживании	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2022-42003
11.03.2022	3.5	3.4	FasterXML jackson-databind Java отказ в обслуживании	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-36518
18.02.2021	5.3	5.1	FasterXML jackson-dataformat-cbor повреждение памяти	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2020-28491
20.01.2021	6.8	6.5	FasterXML jackson-databind эскалация привилегий	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2021-20190
07.01.2021	6.3	6.3	FasterXML jackson-databind Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-36189
07.01.2021	6.3	6.3	FasterXML jackson-databind Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-36188
07.01.2021	6.3	6.3	FasterXML jackson-databind Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-36187