Lucene search
Redhat.comRH:CVE-2018-14720HistoryApr 09, 2020 - 12:16 p.m.
CVE-2018-14720
2020-04-0912:16:41
redhat.com
access.redhat.com
11
0.011 Low
EPSS
Percentile
84.1%
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.
Mitigation
The following conditions are needed for an exploit, we recommend avoiding all if possible
- Deserialization from sources you do not control
enableDefaultTyping()@JsonTypeInfo usingid.CLASSorid.MINIMAL_CLASS`
Related
debiancve
debiancve
CVE-2018-14720
2019-01-02 18:29:00
osv
osv
CVE-2018-14720
2019-01-02 18:29:00
XML External Entity Reference (XXE) in jackson-databind
2019-01-04 19:09:46
jackson-databind - security update
2019-03-04 00:00:00
prion
prion
Deserialization of untrusted data
2019-01-02 18:29:00
github
github
XML External Entity Reference (XXE) in jackson-databind
2019-01-04 19:09:46
cvelist
cvelist
CVE-2018-14720
2019-01-02 18:00:00
cve
cve
CVE-2018-14720
2019-01-02 18:29:00
atlassian
atlassian
ubuntucve
ubuntucve
CVE-2018-14720
2019-01-02 00:00:00
nvd
nvd
CVE-2018-14720
2019-01-02 18:29:00
veracode
veracode
Deserialization Of Untrusted Data
2018-12-28 05:45:32
ibm
ibm
nessus
nessus
Oracle Primavera Unifier Multiple Vulnerabilities (Jan 2019 CPU)
2019-01-18 00:00:00
FreeBSD : payara -- multiple vulnerabilities (71c71ce0-0805-11eb-a3a4-0019dbb15b3f)
2020-10-09 00:00:00
RHEL 6 : JBoss EAP (RHSA-2019:1107)
2019-05-13 00:00:00
freebsd
freebsd
payara -- multiple vulnerabilities
2019-02-01 00:00:00
redhat
redhat
debian
debian
[SECURITY] [DLA 1703-1] jackson-databind security update
2019-03-04 12:13:19
[SECURITY] [DSA 4452-1] jackson-databind security update
2019-05-24 21:04:55
openvas
openvas
Debian: Security Advisory (DLA-1703-1)
2019-03-03 00:00:00
Fedora Update for jackson-dataformats-binary FEDORA-2019-df57551f6d
2019-05-07 00:00:00
Fedora Update for jackson-dataformat-xml FEDORA-2019-df57551f6d
2019-05-07 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: jackson-parent-2.9.1.2-1.fc29
2019-02-19 14:03:53
[SECURITY] Fedora 29 Update: jackson-module-jsonSchema-2.9.8-1.fc29
2019-02-19 14:03:53
[SECURITY] Fedora 29 Update: jackson-dataformat-xml-2.9.8-1.fc29
2019-02-19 14:03:53
ubuntu
ubuntu
Jackson Databind vulnerabilities
2021-03-15 00:00:00
hp
hp
HP Device Manager Security Updates
2023-10-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00
Oracle Critical Patch Update Advisory - January 2019
2019-01-15 00:00:00
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00