Lucene search
Redhat.comRH:CVE-2018-11307HistoryJul 18, 2021 - 12:22 a.m.
CVE-2018-11307
2021-07-1800:22:25
redhat.com
access.redhat.com
15
0.011 Low
EPSS
Percentile
84.2%
A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using MyBatis classes when using DefaultTyping. An attacker could use this flaw to achieve content exfiltration and possibly conduct further attacks.
Related
nvd
nvd
CVE-2018-11307
2019-07-09 16:15:12
cve
cve
CVE-2018-11307
2019-07-09 16:15:12
veracode
veracode
Remote Code Execution (RCE)
2018-05-15 03:28:34
debiancve
debiancve
CVE-2018-11307
2019-07-09 16:15:12
prion
prion
Design/Logic Flaw
2019-07-09 16:15:00
github
github
Deserialization of Untrusted Data in jackson-databind
2019-07-16 17:42:21
cvelist
cvelist
CVE-2018-11307
2019-07-09 15:37:25
ubuntucve
ubuntucve
CVE-2018-11307
2019-07-09 00:00:00
osv
osv
CVE-2018-11307
2019-07-09 16:15:12
Deserialization of Untrusted Data in jackson-databind
2019-07-16 17:42:21
jackson-databind - security update
2019-03-04 00:00:00
ibm
ibm
redhat
redhat
nessus
nessus
RHEL 6 : JBoss EAP (RHSA-2019:1107)
2019-05-13 00:00:00
RHEL 7 : JBoss EAP (RHSA-2019:1108)
2019-05-13 00:00:00
RHEL 7 : rh-maven35-jackson-databind (RHSA-2019:0782)
2024-04-28 00:00:00
debian
debian
[SECURITY] [DLA 1703-1] jackson-databind security update
2019-03-04 12:13:19
[SECURITY] [DSA 4452-1] jackson-databind security update
2019-05-24 21:04:55
openvas
openvas
Debian: Security Advisory (DLA-1703-1)
2019-03-03 00:00:00
Debian: Security Advisory (DSA-4452-1)
2019-05-26 00:00:00
Ubuntu: Security Advisory (USN-4813-1)
2023-01-27 00:00:00
ubuntu
ubuntu
Jackson Databind vulnerabilities
2021-03-15 00:00:00
hp
hp
HP Device Manager Security Updates
2023-10-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2019
2019-01-15 00:00:00
Oracle Critical Patch Update - October 2018
2018-12-18 00:00:00
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00