Known vulnerabilities in eap7-jackson-databind (Red Hat package) 2.12.6.1-1.redhat_00003.1.el7eap

Version: 2.12.6.1-1.redhat_00003.1.el7eap
Software CPE: cpe:2.3:o:red_hat:eap7-jackson-databind_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting eap7-jackson-databind (Red Hat package) version 2.12.6.1-1.redhat_00003.1.el7eap eap7-jackson-databind (Red Hat package) 2.12.6.1-1.redhat_00003.1.el7eap is affected by 3 vulnerabilities: 1 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647
CWE-502 Medium
No
No
2.12.6.1-2.redhat_00004.1.el7eap, 2.12.6.1-2.redhat_00004.1.el8eap 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU64030 - Resource exhaustion
CVE-2021-44906
CWE-400 High
No
No
2.10.4-4.redhat_00004.1.el7eap, 2.12.6.1-2.redhat_00004.1.el7eap, 2.12.6.1-2.redhat_00004.1.el8eap 07.06.2022 SB2022060836
SB2022062103
SB2022062203
and 52 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823
CWE-378 Low
No
No
2.12.6.1-2.redhat_00004.1.el7eap, 2.12.6.1-2.redhat_00004.1.el8eap 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more