Resource exhaustion in jackson-databind - CVE-2022-42004

Vulnerability identifier: #VU68832

CSH Severity: Medium

CVSS v4 BT: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-42004

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control usage of deeply nested arrays in BeanDeserializer._deserializeFromArray. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

jackson-databind
Gentoo Linux
Debian Linux
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Module for SUSE Manager Server
SUSE Enterprise Storage
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Server for SAP Applications
openSUSE Leap
openEuler
Fedora
DB2 Warehouse on Cloud Pak for Data
DB2 on Cloud Pak for Data
IBM Watson Machine Learning Accelerator
Guardium Data Security Center (GDSC)
Cloudera Observability with IBM
Security QRadar EDR
IBM Business Automation Manager Open Editions
Datacap
IBM Engineering Requirements Management DOORS Next
IBM Security Verify Information Queue
Integration Designer
Db2 Graph
DataPower Operations Dashboard
IBM i Modernization Engine for Lifecycle Integration
Dell EMC Streaming Data Platform
IBM Planning Analytics Workspace
Answer Retrieval for Watson Discovery On Prem
Netezza Performance Server Replication Services
Tivoli Netcool/OMNIbus Integration - Probe for Microsoft Exchange Web Services
PowerStore T
PowerStore X
IBM Cloud Pak for Watson AIOps
IBM Sterling Connect:Direct for Microsoft Windows
User Entity Behavior Analytics
IBM Engineering Lifecycle Optimization - Publishing
Engineering Lifecycle Management - Jazz Foundation
MobileFirst Platform
Storage Protect Server
Storage Virtualize
OpenPages for IBM Cloud Pak for Data
webMethods BPM
webMethods Integration Server
Dell Data Protection Central
Robotic Process Automation for Cloud Pak
Content Manager Enterprise Edition
CICS Transaction Gateway
Migration Toolkit for Runtimes
IBM Watson Assistant for IBM Cloud Pak for Data
Jira Service Management Data Center
Jira Service Management Server
OpenShift Logging
IBM Spectrum Control
IBM Sterling B2B Integrator
Jira Software Data Center
Splunk AppDynamics Database Agent
IBM Operations Analytics Predictive Insights
Sterling Connect Direct File Agent
Netcool Operations Insight
IBM Process Mining
IBM Cloud Pak for Multicloud Management Monitoring
Red Hat build of Quarkus
Red Hat Integration Camel Extensions for Quarkus
Financial Transaction Manager for ACH Services and Check Services
IBM Cloud Transformation Advisor
QRadar User Behavior Analytics
IBM Sterling Connect:Direct for UNIX
IBM Watson Discovery for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
IBM Sterling Connect:Direct Web Services
IBM Sterling Partner Engagement Manager
Red Hat Satellite
IBM Maximo Asset Management
IBM Cloud Application Performance Management (APM)
Maximo Manage Application in IBM Maximo Application Suite
IBM Maximo Application Suite
IBM Common Licensing
IBM MQ
IBM Security Verify Governance
EMC Data Protection Advisor
NetWorker
IBM Business Automation Workflow
IBM Cloud Pak for Business Automation
IBM Tivoli Netcool/OMNIbus Integration – Transport Module Common Integration Library
Operations Dashboard
IBM Data Risk Manager
IBM Cloud Pak System
IBM App Connect for Manufacturing
IBM Disconnected Log Collector
IBM Spectrum Protect Backup-Archive Client
SecureTransport
Communications Unified Assurance
Voice Gateway
Crowd Server
Red Hat Single Sign-On
JBoss Enterprise Application Platform
AMQ Broker
AMQ Streams
Red Hat Process Automation Manager (formerly JBoss BPM Suite)
Jira Software Server
JBoss Data Grid
Jazz Reporting Service
IBM Qradar SIEM
IBM Cognos Command Center
Splunk Enterprise
IBM App Connect Enterprise
Red Hat Camel for Spring Boot
Oracle WebCenter Portal
Oracle AutoVue
Operational Decision Manager
IBM Cognos Analytics
eap7-jboss-jsp (Red Hat package)
eap7-jboss-jsf (Red Hat package)
eap7-javaee-security-soteria (Red Hat package)
eap7-jettison (Red Hat package)
eap7-ironjacamar (Red Hat package)
eap7-velocity (Red Hat package)
eap7-elytron-web (Red Hat package)
eap7-jboss-server-migration (Red Hat package)
eap7-wildfly-elytron (Red Hat package)
eap7-snakeyaml (Red Hat package)
QuMagie Mobile
eap7-undertow (Red Hat package)
eap7-jackson-databind (Red Hat package)
eap7-apache-sshd (Red Hat package)
jackson-databind-javadoc
jackson-databind
eap7-jackson-modules-java8 (Red Hat package)
eap7-jackson-annotations (Red Hat package)
eap7-jackson-core (Red Hat package)
eap7-jackson-jaxrs-providers (Red Hat package)
eap7-jackson-modules-base (Red Hat package)
jackson-databind (Debian package)
dev-java/jackson-databind
jackson-parent
jackson-jaxrs-providers
jackson-modules-base
jackson-bom
jackson-core
jackson-annotations
jenkins (Red Hat package)
eap7-resteasy (Red Hat package)
eap7-apache-cxf (Red Hat package)
eap7-hal-console (Red Hat package)
eap7-jboss-ejb-client (Red Hat package)
eap7-netty (Red Hat package)
jenkins-2-plugins (Red Hat package)
eap7-jboss-remoting (Red Hat package)
eap7-hibernate-search (Red Hat package)
eap7-woodstox-core (Red Hat package)
eap7-wildfly (Red Hat package)
rh-sso7-keycloak (Red Hat package)
fasterxml-oss-parent
watsonx.data
Red Hat build of Eclipse Vert.x
IBM FileNet Content Manager
IBM Spectrum Protect for Virtual Environments: Data Protection for Hyper-V
IBM Spectrum Protect for Virtual Environments: Data Protection for VMware
IBM Spectrum Protect for Space Management
IBM InfoSphere Information Server

Install updates from vendor's website.

jackson-databind - update to 2.13.4
Migration Toolkit for Runtimes - update to 1.0.1
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.5.3
IBM Data Risk Manager - update to 2.0.6.15
IBM Cloud Pak System - update to 2.3.3.6
IBM App Connect for Manufacturing - update to 3.0.1.2
Guardium Data Security Center (GDSC) - update to 3.6.1
Cloudera Observability with IBM - update to 3.6.2
Security QRadar EDR - update to 3.12.15
Jira Service Management Data Center - addressed in versions 4.20.27, 5.4.11
Jira Service Management Server - addressed in versions 4.20.27, 5.4.11
OpenShift Logging - addressed in versions 5.3.14, 5.4.8, 5.5.5, 5.6.0
IBM Spectrum Control - update to 5.4.9
SecureTransport - update to 5.5-20221027
IBM Sterling B2B Integrator - addressed in versions 6.0.3.9, 6.1.0.8, 6.1.1.4, 6.1.2.3, 6.2.0.0
Crowd Server - update to 7.1.1
JBoss Enterprise Application Platform - addressed in versions 7.1.9, 7.3.12, 7.4.9
Red Hat Single Sign-On - update to 7.6.2
AMQ Broker - update to 7.10.2
Red Hat Process Automation Manager (formerly JBoss BPM Suite) - update to 7.13.3
Jira Software Data Center - addressed in versions 8.20.28, 9.4.12, 9.11.3
IBM Business Automation Manager Open Editions - update to 8.0.3
Jira Software Server - addressed in versions 8.20.28, 9.4.12, 9.11.3
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
JBoss Data Grid - update to 8.4.1
Datacap - update to 9.1.10
IBM Engineering Requirements Management DOORS Next - update to 9.7.2.8
IBM Security Verify Information Queue - update to 10.0.5
Splunk AppDynamics Database Agent - update to 26.1.0
eap7-jboss-jsp (Red Hat package) - addressed in versions api_2.3_spec-2.0.0-3.Final_redhat_00001.1.el7eap, api_2.3_spec-2.0.0-3.Final_redhat_00001.1.el8eap, api_2.3_spec-2.0.0-3.Final_redhat_00001.1.el9eap
eap7-jboss-jsf (Red Hat package) - addressed in versions api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el7eap, api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el8eap, api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el9eap
Db2 Graph - addressed in versions 1.0.0.1562-amd64, 1.0.0.1562-s390x, 1.0.0.1562-ppcle, 1.0.0.1598-amd64, 1.0.0.1598-s390x, 1.0.0.1598-ppcle
eap7-javaee-security-soteria (Red Hat package) - addressed in versions 1.0.1-3.redhat_00003.1.el7eap, 1.0.1-3.redhat_00003.1.el8eap, 1.0.1-3.redhat_00003.1.el9eap
Voice Gateway - addressed in versions 1.0.8.2, 1.0.8.6
DataPower Operations Dashboard - update to 1.0.19.0
IBM Operations Analytics Predictive Insights - update to 1.3.6.6
eap7-jettison (Red Hat package) - addressed in versions 1.3.8-2.redhat_00002.1.ep7.el7, 1.5.2-1.redhat_00002.1.el7eap, 1.5.2-1.redhat_00002.1.el8eap, 1.5.2-1.redhat_00002.1.el9eap, 1.5.2-2.redhat_00002.1.el7eap
IBM i Modernization Engine for Lifecycle Integration - update to 1.4
Sterling Connect Direct File Agent - update to 1.4.0.2 iFix030
eap7-ironjacamar (Red Hat package) - addressed in versions 1.5.10-1.Final_redhat_00001.1.el7eap, 1.5.10-1.Final_redhat_00001.1.el8eap, 1.5.10-1.Final_redhat_00001.1.el9eap
Netcool Operations Insight - update to 1.6.9
Dell EMC Streaming Data Platform - update to 1.7.0
eap7-velocity (Red Hat package) - update to 1.7.0-3.redhat_00006.1.ep7.el7
IBM Disconnected Log Collector - update to 1.8.3
eap7-elytron-web (Red Hat package) - addressed in versions 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap
eap7-jboss-server-migration (Red Hat package) - addressed in versions 1.10.0-24.Final_redhat_00023.1.el7eap, 1.10.0-24.Final_redhat_00023.1.el8eap, 1.10.0-24.Final_redhat_00023.1.el9eap
IBM Process Mining - update to 1.13.2
eap7-wildfly-elytron (Red Hat package) - addressed in versions 1.15.16-1.Final_redhat_00001.1.el7eap, 1.15.16-1.Final_redhat_00001.1.el8eap, 1.15.16-1.Final_redhat_00001.1.el9eap
eap7-snakeyaml (Red Hat package) - addressed in versions 1.33.0-1.SP1_redhat_00001.1.el7eap, 1.33.0-1.SP1_redhat_00001.1.ep7.el7
watsonx.data - addressed in versions 2.0.2, 2.0.3
IBM Planning Analytics Workspace - update to 2.0.83
QuMagie Mobile - update to 2.2.0.0126
eap7-undertow (Red Hat package) - addressed in versions 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap
AMQ Streams - addressed in versions 2.3.0, 2.4.0
IBM Cloud Pak for Multicloud Management Monitoring - update to 2.3 Fix Pack 7
Red Hat build of Quarkus - update to 2.7.7
eap7-jackson-databind (Red Hat package) - addressed in versions 2.8.11.6-2.SP1_redhat_00002.1.ep7.el7, 2.10.4-4.redhat_00004.1.el7eap, 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap
Answer Retrieval for Watson Discovery On Prem - update to 2.9.0
eap7-apache-sshd (Red Hat package) - addressed in versions 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap
jackson-databind-javadoc - update to 2.9.8-10
jackson-databind - update to 2.9.8-10
eap7-jackson-modules-java8 (Red Hat package) - addressed in versions 2.10.4-2.redhat_00004.1.el7eap, 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-annotations (Red Hat package) - addressed in versions 2.10.4-2.redhat_00004.1.el7eap, 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-core (Red Hat package) - addressed in versions 2.10.4-2.redhat_00004.1.el7eap, 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-providers (Red Hat package) - addressed in versions 2.10.4-2.redhat_00004.1.el7eap, 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-modules-base (Red Hat package) - addressed in versions 2.10.4-4.redhat_00004.1.el7eap, 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap
jackson-databind (Debian package) - update to 2.12.1-1+deb11u1
Red Hat Integration Camel Extensions for Quarkus - update to 2.13.2
dev-java/jackson-databind - update to 2.13.4.1
jackson-databind-javadoc - update to 2.13.4.2-150200.3.12.1
jackson-databind - update to 2.13.4.2-150200.3.12.1
jackson-parent - update to 2.14-1.fc38
jackson-jaxrs-providers - update to 2.14.1-1.fc38
jackson-databind - update to 2.14.1-1.fc38
jackson-modules-base - update to 2.14.1-1.fc38
jackson-bom - update to 2.14.1-1.fc38
jackson-core - update to 2.14.1-1.fc38
jackson-annotations - update to 2.14.1-3.fc38
jenkins (Red Hat package) - addressed in versions 2.361.4.1675702346-3.el8, 2.401.1.1686831596-3.el8
Netezza Performance Server Replication Services - update to 3.0.5.0
Financial Transaction Manager for ACH Services and Check Services - update to 3.0.5.4 iFix 28
eap7-resteasy (Red Hat package) - addressed in versions 3.0.27-1.Final_redhat_00001.1.ep7.el7, 3.11.6-1.Final_redhat_00001.1.el7eap
eap7-apache-cxf (Red Hat package) - update to 3.1.16-4.redhat_00003.1.ep7.el7
Tivoli Netcool/OMNIbus Integration - Probe for Microsoft Exchange Web Services - update to 3.2
PowerStore T - update to 3.2.1.0-1989710
PowerStore X - update to 3.2.1.0-1989710
eap7-hal-console (Red Hat package) - addressed in versions 3.2.17-1.Final_redhat_00001.1.el7eap, 3.3.16-1.Final_redhat_00001.1.el7eap, 3.3.16-1.Final_redhat_00001.1.el8eap, 3.3.16-1.Final_redhat_00001.1.el9eap
IBM Cloud Transformation Advisor - update to 3.3.1
Red Hat Camel for Spring Boot - addressed in versions 3.18.3 Patch 2, 3.20.1
eap7-jboss-ejb-client (Red Hat package) - addressed in versions 4.0.49-1.Final_redhat_00001.1.el7eap, 4.0.49-1.Final_redhat_00001.1.el8eap, 4.0.49-1.Final_redhat_00001.1.el9eap
IBM Cloud Pak for Watson AIOps - update to 4.1
QRadar User Behavior Analytics - update to 4.1.12
eap7-netty (Red Hat package) - addressed in versions 4.1.63-1.Final_redhat_00002.1.ep7.el7, 4.1.63-4.Final_redhat_00002.1.el7eap
IBM Sterling Connect:Direct for UNIX - addressed in versions 4.3.0.1.107, 6.0.0.2.143, 6.1.0.4.73, 6.2.0.5.10
Red Hat build of Eclipse Vert.x - update to 4.3.4
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.7.0
IBM Sterling Connect:Direct for Microsoft Windows - addressed in versions 4.8.0.3.52, 6.0.0.4.60, 6.1.0.2.54, 6.2.0.4.20
jenkins-2-plugins (Red Hat package) - addressed in versions 4.11.1686831822-1.el8, 4.12.1675702407-1.el8
User Entity Behavior Analytics - update to 5.0.2
App Connect Enterprise Certified Container - addressed in versions 5.0.3, 7.1.0
eap7-jboss-remoting (Red Hat package) - addressed in versions 5.0.27-1.Final_redhat_00001.1.el7eap, 5.0.27-1.Final_redhat_00001.1.el8eap, 5.0.27-1.Final_redhat_00001.1.el9eap
IBM FileNet Content Manager - addressed in versions 5.5.4.0 IF009, 5.5.8.0 IF003, 5.5.9.0 IF001
eap7-hibernate-search (Red Hat package) - addressed in versions 5.10.13-3.Final_redhat_00001.1.el7eap, 5.10.13-3.Final_redhat_00001.1.el8eap, 5.10.13-3.Final_redhat_00001.1.el9eap
IBM Sterling Connect:Direct Web Services - addressed in versions 6.0.0.12, 6.1.0.16, 6.2.0.12
IBM Sterling Partner Engagement Manager - addressed in versions 6.1.2.8, 6.2.0.6, 6.2.1.3, 6.2.2.1
eap7-woodstox-core (Red Hat package) - addressed in versions 6.4.0-1.redhat_00001.1.el7eap, 6.4.0-1.redhat_00001.1.el8eap, 6.4.0-1.redhat_00001.1.el9eap
Red Hat Satellite - update to 6.13
IBM Engineering Lifecycle Optimization - Publishing - addressed in versions 7.0.1.23, 7.0.2.25
Jazz Reporting Service - update to 7.0.2 iFix022
Engineering Lifecycle Management - Jazz Foundation - addressed in versions 7.0.3 iFix020, 7.1.0 iFix006
eap7-wildfly (Red Hat package) - addressed in versions 7.1.9-2.GA_redhat_00002.1.ep7.el7, 7.3.12-3.GA_redhat_00002.1.el7eap, 7.4.9-4.GA_redhat_00003.1.el7eap, 7.4.9-4.GA_redhat_00003.1.el8eap, 7.4.9-4.GA_redhat_00003.1.el9eap
IBM Qradar SIEM - update to 7.5.0 Update Pack 6
IBM Maximo Asset Management - addressed in versions 7.6.1.2.32, 7.6.1.3.7
MobileFirst Platform - update to 8.0.0.0-MFPF-IF202304111626
IBM Cloud Application Performance Management (APM) - update to 8.1.4.0.14
IBM Spectrum Protect for Virtual Environments: Data Protection for Hyper-V - update to 8.1.17.0
IBM Spectrum Protect for Virtual Environments: Data Protection for VMware - update to 8.1.17.0
IBM Spectrum Protect for Space Management - update to 8.1.17.0
IBM Spectrum Protect Backup-Archive Client - update to 8.1.17.0
Storage Protect Server - update to 8.1.19
Maximo Manage Application in IBM Maximo Application Suite - update to 8.4.8
Storage Virtualize - addressed in versions 8.6.3.0, 8.7.0.0
IBM Maximo Application Suite - addressed in versions 8.8.6, 8.9.2
Operational Decision Manager - addressed in versions 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5
OpenPages for IBM Cloud Pak for Data - update to 8.302.0
IBM Common Licensing - update to 9.0.0.6
IBM MQ - addressed in versions 9.3.0.2, 9.3.1.1
IBM Security Verify Governance - update to 10.0.1.0.4
IBM Cognos Command Center - update to 10.2.4 Fix Pack 1 IF17
webMethods BPM - update to 11.1 Fix 1
webMethods Integration Server - update to 11.1 Fix 1
IBM Cognos Analytics - addressed in versions 11.1.7.6, 11.2.4
IBM InfoSphere Information Server - update to 11.7.1.4 Service pack 1
rh-sso7-keycloak (Red Hat package) - addressed in versions 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso
EMC Data Protection Advisor - update to 19.10 B46
NetWorker - update to 19.10.0.0
Dell Data Protection Central - update to 19.11.0-2
IBM Business Automation Workflow - addressed in versions 20.0.0.2, 21.0.3, 21.0.3 IF015, 22.0.1, 22.0.1 IF005
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3.18, 22.0.2.2
Robotic Process Automation for Cloud Pak - update to 21.0.7
IBM Tivoli Netcool/OMNIbus Integration – Transport Module Common Integration Library - update to 36.0
fasterxml-oss-parent - update to 49-2.fc38
Operations Dashboard - update to 2022.2.1-7-lts

• https://github.com/FasterXML/jackson-databind/issues/3582
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490
• https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88

• Denial of service in FasterXML jackson-databind
• Gentoo update for FasterXML jackson-databind
• Denial of service in IBM Sterling Connect:Direct File Agent
• SUSE update for jackson-databind
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.4
• Debian update for jackson-databind
• Multiple vulnerabilities in IBM Answer Retrieval for Watson Discovery
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in Red Hat AMQ Broker 7.10
• Multiple vulnerabilities in IBM CICS Transaction Gateway
• Multiple vulnerabilities in IBM Business Automation Workflow
• Multiple vulnerabilities in IBM Data Risk Manager
• Multiple vulnerabilities in Openshift Logging 5.3
• Multiple vulnerabilities in OpenShift Logging 5.5
• Denial of service in IBM Watson Assistant for IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat build of Eclipse Vert.x
• Multiple vulnerabilities in IBM Tivoli Netcool/OMNIbus Probe and Integrations Library
• Resource exhaustion in IBM Sterling Connect:Direct for UNIX
• Multiple vulnerabilities in IBM Spectrum Control
• Multiple vulnerabilities in IBM Spectrum Protect for Virtual Environments
• Multiple vulnerabilities in IBM Spectrum Protect for Space Management
• Multiple vulnerabilities in IBM Spectrum Protect Backup-Archive Client
• Multiple vulnerabilities in IBM App Connect Enterprise
• Resource exhaustion in IBM Sterling Connect:Direct Web Services
• Multiple vulnerabilities in IBM Process Mining
• Multiple vulnerabilities in Red Hat AMQ Streams
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in FileNet Content Manager
• Resource exhaustion in IBM Content Manager Enterprise Edition
• Multiple vulnerabilities in Red Hat Integration Camel Extensions for Quarkus
• Multiple vulnerabilities in Migration Toolkit for Runtimes
• Multiple vulnerabilities in IBM Planning Analytics Workspace
• Multiple vulnerabilities in IBM Voice Gateway
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.4
• Multiple vulnerabilities in JBoss Enterprise Application Platform 7.4 for RHEL 7
• Multiple vulnerabilities in JBoss Enterprise Application Platform 7.4 for RHEL 8
• Multiple vulnerabilities in JBoss Enterprise Application Platform 7.4 for RHEL 9
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in IBM MQ
• Resource exhaustion in IBM Sterling Connect:Direct for Microsoft Windows
• Multiple vulnerabilities in Red Hat Data Grid
• Multiple vulnerabilities in IBM Common Licensing
• Multiple vulnerabilities in IBM Operations Analytics Predictive Insights
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for OpenShift
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for RHEL 9
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for RHEL 8
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for RHEL 7
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• IBM Operations Dashboard update for jackson-databind
• OpenShift Developer Tools and Services for OCP 4.12 update for Jenkins and Jenkins-2-plugins
• Multiple vulnerabilities in Red Hat build of Quarkus
• Multiple vulnerabilities in IBM Maximo Application Suite
• Multiple vulnerabilities in Axway SecureTransport (October 2022)
• Multiple vulnerabilities in IBM Cloud Pak System
• Multiple vulnerabilities in IBM DataPower Operations Dashboard
• Multiple vulnerabilities in Communications Unified Assurance
• Multiple vulnerabilities in IBM Security Verify Governance
• Multiple vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite
• Multiple vulnerabilities in IBM Maximo Asset Management
• Multiple vulnerabilities in IBM Cognos Command Center
• Multiple vulnerabilities in Red Hat Integration Camel for Spring Boot
• Multiple vulnerabilities in Red Hat Satellite 6.13
• Multiple vulnerabilities in IBM Db2 Graph
• Multiple vulnerabilities in IBM Security Verify Information Queue
• Multiple vulnerabilities in IBM InfoSphere Information Server
• Multiple vulnerabilities in Red Hat AMQ Streams 2.4
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in IBM QRadar User Behavior Analytics
• Multiple vulnerabilities in Red Hat Integration Camel for Spring Boot
• OpenShift Developer Tools and Services for OCP 4.11 update for jenkins and jenkins-2-plugins
• Multiple vulnerabilities in IBM Storage Protect Server
• Multiple vulnerabilities in IBM Cognos Analytics
• Multiple vulnerabilities in IBM i Modernization Engine for Lifecycle Integration
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data
• Multiple vulnerabilities in IBM Watson Discovery Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in Oracle AutoVue
• Multiple vulnerabilities in Dell Streaming Data Platform
• Multiple vulnerabilities in IBM App Connect for Manufacturing
• Multiple vulnerabilities in IBM OpenPages for IBM Cloud Pak for Data
• Multiple vulnerabilities in Dell PowerStore Family
• Splunk Enterprise update for third-party packages
• Resource exhaustion in IBM Cloud Pak for Multicloud Management Monitoring
• Multiple vulnerabilities in IBM Application Performance Management products
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in IBM Jazz Reporting Service
• Multiple vulnerabilities in Red Hat Process Automation Manager 7.13
• Multiple vulnerabilities in Oracle WebCenter Portal
• Jira Service Management Data Center and Server update for FasterXML jackson-databind
• Multiple vulnerabilities in IBM Engineering Lifecycle Optimization - Publishing
• Multiple vulnerabilities in IBM Sterling B2B Integrator
• Multiple vulnerabilities in third-party components in Jira Software Data Center and Server
• Multiple vulnerabilities in IBM Sterling Partner Engagement Manager Essentials Edition
• Multiple vulnerabilities in IBM Watson Machine Learning Accelerator on Cloud Pak for Data
• Multiple vulnerabilities in Dell Networker
• Multiple vulnerabilities in IBM Disconnected Log Collector
• Multiple vulnerabilities in IBM Engineering Requirements Management DOORS/DWA
• Multiple vulnerabilities in QNAP QuMagie Mobile for Android
• openEuler update for jackson-databind
• openEuler 20.03 LTS SP4 update for jackson-databind
• Multiple vulnerabilities in IBM Integration Designer
• Multiple vulnerabilities in IBM Operational Decision Manager
• Multiple vulnerabilities in IBM MobileFirst Platform Foundation
• Multiple vulnerabilities in IBM Storage Virtualize
• Multiple vulnerabilities in Dell Data Protection Central
• Multiple vulnerabilities in Data Protection Advisor
• Multiple vulnerabilities in IBM watsonx.data
• IBM watsonx.data update for FasterXML jackson-databind
• Fedora 38 update for fasterxml-oss-parent, jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-jaxrs-providers, jackson-modules-base, jackson-parent
• Multiple vulnerabilities in Guardium Data Security Center
• Multiple vulnerabilities in IBM Security QRadar EDR
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
• Multiple vulnerabilities in IBM Netezza Performance Server Replication Services
• Multiple vulnerabilities in IBM User Entity Behavior Analytics
• Multiple vulnerabilities in Cloudera Observability on Premises with IBM
• Crowd Data Center and Server update for jackson-databind
• Multiple vulnerabilities in IBM Datacap
• Multiple vulnerabilities in IBM Engineering Lifecycle Management - Jazz Foundation
• Multiple vulnerabilities in IBM webMethods BPM and IBM webMethods Integration
• Multiple vulnerabilities in IBM Financial Transaction Manager for ACH Services and Check Services for Multi-Platform
• Splunk AppDynamics Database Agent update for third-party components