Known vulnerabilities in jackson-databind 2.9.5 - page 3

Vendor: FasterXML
Version: 2.9.5
Software CPE: cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
Total vulnerabilities: 58
Public exploits: 13
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting jackson-databind version 2.9.5 jackson-databind 2.9.5 is affected by 58 vulnerabilities: 42 high, 12 medium, 4 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU21750 - Improper input validation
CVE-2019-17531
CWE-20 Medium
No
No
2.6.7.3, 2.9.10.1 13.10.2019 SB2019100711
SB2019120206
SB2019121120
and 24 more
#VU21594 - Improper input validation
CVE-2019-17267
CWE-20 Medium
No
No
2.9.10 07.10.2019 SB2019100710
SB2019102422
SB2019120206
and 19 more
#VU21593 - Improper input validation
CVE-2019-16943
CWE-20 Medium
No
No
2.6.7.3, 2.9.10.1 07.10.2019 SB2019100711
SB2019100716
SB2019120206
and 34 more
#VU21580 - Improper input validation
CVE-2019-16942
CWE-20 Medium
No
No
2.6.7.3, 2.9.10.1 07.10.2019 SB2019100711
SB2019100716
SB2019111903
and 23 more
#VU21136 - Exposure of sensitive information to an unauthorized actor
CVE-2019-16335
CWE-200 Medium
No
No
2.6.7.3, 2.9.9.3 16.09.2019 SB2019091616
SB2019100716
SB2019102422
and 21 more
#VU21135 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14540
CWE-200 Medium
Public exploit available
No
2.6.7.3, 2.9.9.3 16.09.2019 SB2019091616
SB2019100716
SB2019102422
and 23 more
#VU19941 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12086
CWE-200 Medium
No
No
2.9.9 06.08.2019 SB2019052407
SB2019092703
SB2019100116
and 29 more
#VU19937 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14439
CWE-200 Medium
No
No
2.9.9.2 06.08.2019 SB2019073015
SB2019100716
SB2019102422
and 16 more
#VU19933 - Permissions, Privileges, and Access Controls
CVE-2019-14379
CWE-264 High
No
No
2.9.9.2 05.08.2019 SB2019091307
SB2019092703
SB2019100116
and 33 more
#VU19018 - Deserialization of Untrusted Data
CVE-2019-12384
CWE-502 High
No
No
2.9.9 04.07.2019 SB2019091218
SB2019092703
SB2019100116
and 28 more
#VU18961 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12814
CWE-200 Medium
No
No
2.7.9.6, 2.8.11.4, 2.9.9.1 02.07.2019 SB2019062606
SB2019092703
SB2019100116
and 25 more
#VU17781 - Improper input validation
CVE-2018-19362
CWE-20 High
No
No
2.9.8 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 38 more
#VU17780 - Improper input validation
CVE-2018-19360
CWE-20 High
No
No
2.9.8 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 22 more
#VU17779 - Improper input validation
CVE-2018-19361
CWE-20 High
No
No
2.9.8 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 23 more
#VU17778 - Improper input validation
CVE-2018-14719
CWE-20 High
No
No
2.9.7 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 22 more
#VU17777 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-14720
CWE-611 Low
No
No
2.9.7 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 21 more
#VU17776 - Server-Side Request Forgery (SSRF)
CVE-2018-14721
CWE-918 Low
No
No
2.9.7 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 23 more
#VU16786 - Improper input validation
CVE-2018-1000873
CWE-20 Low
No
No
2.9.8 04.01.2019 SB2018122016
SB2023022124
SB2021022238
and 5 more


Showing elements 41 - 60 out of 58