Every CVE Search/ Get API key

CVE-2022-42003

Uncontrolled Resource Consumption in Jackson-databind

7.5 HighFix available

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.41%Up 2.5 points since Oct 2, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

Record
CVE-2022-42003
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-502
Updated
2026-11-02
CVE List 7.5

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

Record
CVE-2022-42003
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-502
Updated
2026-11-02
EUVDEUVD-2022-7117 7.5

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

Record
EUVD-2022-7117
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-jjjh-jjxp-wpff 7.5

Uncontrolled Resource Consumption in Jackson-databind

In FasterXML jackson-databind 2.4.0-rc1 until 2.12.7.1 and in 2.13.x before 2.13.4.2 resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled. This was patched in 2.12.7.1, 2.13.4.2, and 2.14.0.

Commits that introduced vulnerable code are https://github.com/FasterXML/jackson-databind/commit/d499f2e7bbc5ebd63af11e1f5cf1989fa323aa45, https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1, and https://github.com/FasterXML/jackson-databind/commit/7ba9ac5b87a9d6ac0d2815158ecbeb315ad4dcdc.

Fix commits are https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea and https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33.

The 2.13.4.1 release does fix this issue, however it also references a non-existent jackson-bom which causes build failures for gradle users. See https://github.com/FasterXML/jackson-databind/issues/3627#issuecomment-1277957548 for details. This is fixed in 2.13.4.2 which is listed in the advisory metadata so that users are not subjected to unnecessary build failures

Record
GHSA-jjjh-jjxp-wpff
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-502
Updated
2026-11-02
OSV 7.5

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

Record
CVE-2022-42003
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVGHSA-jjjh-jjxp-wpff 7.5

Uncontrolled Resource Consumption in Jackson-databind

In FasterXML jackson-databind 2.4.0-rc1 until 2.12.7.1 and in 2.13.x before 2.13.4.2 resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled. This was patched in 2.12.7.1, 2.13.4.2, and 2.14.0.

Commits that introduced vulnerable code are https://github.com/FasterXML/jackson-databind/commit/d499f2e7bbc5ebd63af11e1f5cf1989fa323aa45, https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1, and https://github.com/FasterXML/jackson-databind/commit/7ba9ac5b87a9d6ac0d2815158ecbeb315ad4dcdc.

Fix commits are https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea and https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33.

The 2.13.4.1 release does fix this issue, however it also references a non-existent jackson-bom which causes build failures for gradle users. See https://github.com/FasterXML/jackson-databind/issues/3627#issuecomment-1277957548 for details. This is fixed in 2.13.4.2 which is listed in the advisory metadata so that users are not subjected to unnecessary build failures

Record
GHSA-jjjh-jjxp-wpff
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-502
Updated
2026-11-02
Show 48 moreShow less
OSVOESA-2023-1921 7.5

jackson-databind security update

The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration.

Security Fix(es):

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.(CVE-2020-36518)

In FasterXML jackson-databind before 2.14.0-rc1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled. Additional fix version in 2.13.4.1 and 2.12.17.1(CVE-2022-42003)

In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.(CVE-2022-42004)

Record
OESA-2023-1921
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1971 7.5

jackson-databind security update

The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration.

Security Fix(es):

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.(CVE-2020-36518)

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.(CVE-2022-42003)

In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.(CVE-2022-42004)

Record
OESA-2023-1971
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:0261 8.5

Red Hat Security Advisory: Satellite 6.12.1 Async Security Update

Record
RHSA-2023:0261
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0552 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0552
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0553 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0553
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0554 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0554
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1043 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7

Record
RHSA-2023:1043
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1044 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8

Record
RHSA-2023:1044
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1045 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9

Record
RHSA-2023:1045
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1064 9.9

Red Hat Security Advisory: OpenShift Developer Tools and Services for OCP 4.12 security update

Record
RHSA-2023:1064
CVSS 3.1
9.9 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1151 8.5

Red Hat Security Advisory: Satellite 6.11.5 Async Security Update

Record
RHSA-2023:1151
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:2097 9.8

Red Hat Security Advisory: Satellite 6.13 Release

Record
RHSA-2023:2097
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:3663 8.8

Red Hat Security Advisory: jenkins and jenkins-2-plugins security update

Record
RHSA-2023:3663
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:1746 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update

Record
RHSA-2025:1746
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:1747 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.12 security update

Record
RHSA-2025:1747
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-APP-MAVEN-CVE-2022-42003 7.5

CVE-2022-42003 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2022-42003 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available.

Record
ROOT-APP-MAVEN-CVE-2022-42003
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-42003 7.5

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

Record
UBUNTU-CVE-2022-42003
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1776386160 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 4 CVEs. Fixed in 2.12.1-tuxcare.1.

Record
CLSA-2026-1776386160
Updated
2026-11-02
OSVCLSA-2026-1791531399 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.11.1-tuxcare.1.

Record
CLSA-2026-1791531399
Updated
2026-11-02
OSVCLSA-2026-1791531441 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.11.3-tuxcare.1.

Record
CLSA-2026-1791531441
Updated
2026-11-02
OSVCLSA-2026-1791782090 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.12.2-tuxcare.1.

Record
CLSA-2026-1791782090
Updated
2026-11-02
OSVCLSA-2026-1792441009 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.13.4-tuxcare.1.

Record
CLSA-2026-1792441009
Updated
2026-11-02
OSVCLSA-2026-1792441019 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (12 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 12 CVEs. Fixed in 2.9.10.7-tuxcare.1.

Record
CLSA-2026-1792441019
Updated
2026-11-02
OSVCLSA-2026-1792441073 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.13.3-tuxcare.1.

Record
CLSA-2026-1792441073
Updated
2026-11-02
OSVCLSA-2026-1792441135 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.9.10.6-tuxcare.1.

Record
CLSA-2026-1792441135
Updated
2026-11-02
OSVCLSA-2026-1792441292 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.10.4-tuxcare.1.

Record
CLSA-2026-1792441292
Updated
2026-11-02
OSVCLSA-2026-1792441308 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.10.5.1-tuxcare.1.

Record
CLSA-2026-1792441308
Updated
2026-11-02
OSVCLSA-2026-1792441342 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.13.2.2-tuxcare.1.

Record
CLSA-2026-1792441342
Updated
2026-11-02
OSVCLSA-2026-1792441468 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.10.0-tuxcare.1.

Record
CLSA-2026-1792441468
Updated
2026-11-02
OSVCLSA-2026-1792441587 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.9.10.8-tuxcare.1.

Record
CLSA-2026-1792441587
Updated
2026-11-02
OSVCLSA-2026-1792441757 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.12.6-tuxcare.1.

Record
CLSA-2026-1792441757
Updated
2026-11-02
OSVCLSA-2026-1792441770 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.11.4-tuxcare.1.

Record
CLSA-2026-1792441770
Updated
2026-11-02
OSVCLSA-2026-1792441785 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.12.7-tuxcare.1.

Record
CLSA-2026-1792441785
Updated
2026-11-02
OSVCLSA-2026-1792441869 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.12.6.1-tuxcare.1.

Record
CLSA-2026-1792441869
Updated
2026-11-02
OSVCLSA-2026-1792474422 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 11 CVEs. Fixed in 2.11.2-tuxcare.1.

Record
CLSA-2026-1792474422
Updated
2026-11-02
OSVCLSA-2026-1792514794 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.10.3-tuxcare.1.

Record
CLSA-2026-1792514794
Updated
2026-11-02
OSVCLSA-2026-1792514815 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.10.2-tuxcare.1.

Record
CLSA-2026-1792514815
Updated
2026-11-02
OSVCLSA-2026-1792514817 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.11.0-tuxcare.1.

Record
CLSA-2026-1792514817
Updated
2026-11-02
OSVCLSA-2026-1792514818 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.12.5-tuxcare.1.

Record
CLSA-2026-1792514818
Updated
2026-11-02
OSVCLSA-2026-1792514845 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.12.4-tuxcare.1.

Record
CLSA-2026-1792514845
Updated
2026-11-02
OSVCLSA-2026-1792517970 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.13.0-tuxcare.1.

Record
CLSA-2026-1792517970
Updated
2026-11-02
OSVCLSA-2026-1792517981 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.13.1-tuxcare.1.

Record
CLSA-2026-1792517981
Updated
2026-11-02
OSVCLSA-2026-1793200844 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.6.7.3-tuxcare.2.

Record
CLSA-2026-1793200844
Updated
2026-11-02
OSVCLSA-2026-1793200950 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.6.5-tuxcare.2.

Record
CLSA-2026-1793200950
Updated
2026-11-06
OSVCLSA-2026-1793208072 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (31 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 31 CVEs. Fixed in 2.5.4-tuxcare.2.

Record
CLSA-2026-1793208072
Updated
2026-11-06
OSVCLSA-2026-1793209672 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.6.6-tuxcare.2.

Record
CLSA-2026-1793209672
Updated
2026-11-06
OSVCLSA-2026-1793273163 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.9.10-tuxcare.2.

Record
CLSA-2026-1793273163
Updated
2026-11-02
OSVCLSA-2026-1793273322 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.9.8-tuxcare.2.

Record
CLSA-2026-1793273322
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
com.fasterxml.jackson.core:jackson-databind
Maven
 2.4.0-rc1 up to 2.12.7.1
2.12.7.1
com.fasterxml.jackson.core:jackson-databind
Maven
 2.13.0 up to 2.13.4.2
2.13.4.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.12.1 up to 2.12.1-tuxcare.1
2.12.1-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.11.1 up to 2.11.1-tuxcare.1
2.11.1-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.11.3 up to 2.11.3-tuxcare.1
2.11.3-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.12.2 up to 2.12.2-tuxcare.1
2.12.2-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 9 CVEs
 2.13.4 up to 2.13.4-tuxcare.1
2.13.4-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 11 CVEs
 2.9.10.7 up to 2.9.10.7-tuxcare.1
2.9.10.7-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.13.3 up to 2.13.3-tuxcare.1
2.13.3-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 9 CVEs
 2.9.10.6 up to 2.9.10.6-tuxcare.1
2.9.10.6-tuxcare.1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.10.4 up to 2.10.4-tuxcare.1
2.10.4-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.10.5.1 up to 2.10.5.1-tuxcare.1
2.10.5.1-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.13.2.2 up to 2.13.2.2-tuxcare.1
2.13.2.2-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.10.0 up to 2.10.0-tuxcare.1
2.10.0-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.9.10.8 up to 2.9.10.8-tuxcare.1
2.9.10.8-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.12.6 up to 2.12.6-tuxcare.1
2.12.6-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 9 CVEs
 2.11.4 up to 2.11.4-tuxcare.1
2.11.4-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.12.7 up to 2.12.7-tuxcare.1
2.12.7-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.12.6.1 up to 2.12.6.1-tuxcare.1
2.12.6.1-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 10 CVEs
 2.11.2 up to 2.11.2-tuxcare.1
2.11.2-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.10.3 up to 2.10.3-tuxcare.1
2.10.3-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.10.2 up to 2.10.2-tuxcare.1
2.10.2-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.11.0 up to 2.11.0-tuxcare.1
2.11.0-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.12.5 up to 2.12.5-tuxcare.1
2.12.5-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.12.4 up to 2.12.4-tuxcare.1
2.12.4-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.13.0 up to 2.13.0-tuxcare.1
2.13.0-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.13.1 up to 2.13.1-tuxcare.1
2.13.1-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.6.7.3 up to 2.6.7.3-tuxcare.2, plus listed versions
2.6.7.3-tuxcare.1
2.6.7.3-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.6.5 up to 2.6.5-tuxcare.2, plus listed versions
2.6.5-tuxcare.1
2.6.5-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 30 CVEs
 2.5.4 up to 2.5.4-tuxcare.2, plus listed versions
2.5.4-tuxcare.1
2.5.4-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.6.6 up to 2.6.6-tuxcare.2, plus listed versions
2.6.6-tuxcare.1
2.6.6-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.9.10 up to 2.9.10-tuxcare.2, plus listed versions
2.9.10-tuxcare.1
2.9.10-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.9.8 up to 2.9.8-tuxcare.2, plus listed versions
2.9.8-tuxcare.1
2.9.8-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.9.9.1 up to 2.9.9.1-tuxcare.2, plus listed versions
2.9.9.1-tuxcare.1
2.9.9.1-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.7 up to 2.8.7-tuxcare.4, plus listed versions
2.8.7-tuxcare.12.8.7-tuxcare.22.8.7-tuxcare.3
2.8.7-tuxcare.4
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.9.10.3 up to 2.9.10.3-tuxcare.3, plus listed versions
2.9.10.3-tuxcare.12.9.10.3-tuxcare.2
2.9.10.3-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.7.1 up to 2.7.1-tuxcare.3, plus listed versions
2.7.1-tuxcare.12.7.1-tuxcare.2
2.7.1-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.4 up to 2.8.4-tuxcare.3, plus listed versions
2.8.4-tuxcare.12.8.4-tuxcare.2
2.8.4-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.7.9 up to 2.7.9-tuxcare.2, plus listed versions
2.7.9-tuxcare.1
2.7.9-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.5 up to 2.8.5-tuxcare.3, plus listed versions
2.8.5-tuxcare.12.8.5-tuxcare.2
2.8.5-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.11.1 up to 2.8.11.1-tuxcare.2, plus listed versions
2.8.11.1-tuxcare.1
2.8.11.1-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.9.7 up to 2.9.7-tuxcare.2, plus listed versions
2.9.7-tuxcare.1
2.9.7-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.7.5 up to 2.7.5-tuxcare.2, plus listed versions
2.7.5-tuxcare.1
2.7.5-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.9.3 up to 2.9.3-tuxcare.3, plus listed versions
2.9.3-tuxcare.12.9.3-tuxcare.2
2.9.3-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 12 CVEs
 2.4.5 up to 2.4.5-tuxcare.2, plus listed versions
2.4.5-tuxcare.1
2.4.5-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.11 up to 2.8.11-tuxcare.2, plus listed versions
2.8.11-tuxcare.1
2.8.11-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.10 up to 2.8.10-tuxcare.3, plus listed versions
2.8.10-tuxcare.12.8.10-tuxcare.2
2.8.10-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 12 CVEs
 2.4.1 up to 2.4.1-tuxcare.2, plus listed versions
2.4.1-tuxcare.1
2.4.1-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 11 CVEs
 2.4.3 up to 2.4.3-tuxcare.2, plus listed versions
2.4.3-tuxcare.1
2.4.3-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.6.7.2 up to 2.6.7.2-tuxcare.3, plus listed versions
2.6.7.2-tuxcare.12.6.7.2-tuxcare.2
2.6.7.2-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.9.4 up to 2.9.4-tuxcare.2, plus listed versions
2.9.4-tuxcare.1
2.9.4-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.7.8 up to 2.7.8-tuxcare.3, plus listed versions
2.7.8-tuxcare.12.7.8-tuxcare.2
2.7.8-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 11 CVEs
 2.9.10.4 up to 2.9.10.4-tuxcare.3, plus listed versions
2.9.10.4-tuxcare.12.9.10.4-tuxcare.2
2.9.10.4-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 14 CVEs
 2.8.11.3 up to 2.8.11.3-tuxcare.2, plus listed versions
2.8.11.3-tuxcare.1
2.8.11.3-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 12 CVEs
 2.9.1 up to 2.9.1-tuxcare.2, plus listed versions
2.9.1-tuxcare.1
2.9.1-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 10 CVEs
 2.7.9.3 up to 2.7.9.3-tuxcare.3, plus listed versions
2.7.9.3-tuxcare.12.7.9.3-tuxcare.2
2.7.9.3-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 13 CVEs
 2.9.9 up to 2.9.9-tuxcare.2, plus listed versions
2.9.9-tuxcare.1
2.9.9-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 16 CVEs
 2.9.9.3 up to 2.9.9.3-tuxcare.2, plus listed versions
2.9.9.3-tuxcare.1
2.9.9.3-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 13 CVEs
 2.8.11.4 up to 2.8.11.4-tuxcare.2, plus listed versions
2.8.11.4-tuxcare.1
2.8.11.4-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 19 CVEs
 2.9.5 up to 2.9.5-tuxcare.2, plus listed versions
2.9.5-tuxcare.1
2.9.5-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.6.4 up to 2.6.4-tuxcare.2, plus listed versions
2.6.4-tuxcare.1
2.6.4-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 11 CVEs
 2.7.3 up to 2.7.3-tuxcare.3, plus listed versions
2.7.3-tuxcare.12.7.3-tuxcare.2
2.7.3-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 14 CVEs
 2.9.10.1 up to 2.9.10.1-tuxcare.2, plus listed versions
2.9.10.1-tuxcare.1
2.9.10.1-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 11 CVEs
 2.9.2 up to 2.9.2-tuxcare.3, plus listed versions
2.9.2-tuxcare.12.9.2-tuxcare.2
2.9.2-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.6.7.1 up to 2.6.7.1-tuxcare.3, plus listed versions
2.6.7.1-tuxcare.12.6.7.1-tuxcare.2
2.6.7.1-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.4.1.1 up to 2.4.1.1-tuxcare.3, plus listed versions
2.4.1.1-tuxcare.12.4.1.1-tuxcare.2
2.4.1.1-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.6.3 up to 2.6.3-tuxcare.3, plus listed versions
2.6.3-tuxcare.12.6.3-tuxcare.2
2.6.3-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.7.0 up to 2.7.0-tuxcare.3, plus listed versions
2.7.0-tuxcare.12.7.0-tuxcare.2
2.7.0-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.9.10.5 up to 2.9.10.5-tuxcare.2, plus listed versions
2.9.10.5-tuxcare.1
2.9.10.5-tuxcare.2
jackson-databind
Debian:12
 before 2.14.0-1
2.14.0-1
jackson-databind
Debian:13
 before 2.14.0-1
2.14.0-1
jackson-databind
Debian:14
 before 2.14.0-1
2.14.0-1
jackson-databind
Debian:10
From an advisory covering 3 CVEs
 before 2.9.8-3+deb10u4, plus listed versions
2.9.8-32.9.8-3+deb10u12.9.8-3+deb10u22.9.8-3+deb10u3
2.9.8-3+deb10u4
jackson-databind
Debian:11
From an advisory covering 3 CVEs
 before 2.12.1-1+deb11u1, plus listed versions
2.12.1-1
2.12.1-1+deb11u1
com.fasterxml.jackson.core:jackson-databind
Maven
 2.4.0-rc1 up to 2.12.7.1, plus listed versions
2.10.02.10.0.pr12.10.0.pr22.10.0.pr32.10.1
Show 45 moreShow less
2.10.22.10.32.10.42.10.52.10.5.12.11.02.11.0.rc12.11.12.11.22.11.32.11.42.12.02.12.0-rc12.12.0-rc22.12.12.12.22.12.32.12.42.12.52.12.62.12.6.12.12.72.4.02.4.0-rc22.4.0-rc32.4.12.4.1.12.4.1.22.4.1.32.4.22.4.32.4.42.4.52.4.5.12.4.62.4.6.12.5.02.5.0-rc12.5.12.5.22.5.32.5.42.5.52.6.02.6.0-rc1
2.12.7.1
com.fasterxml.jackson.core:jackson-databind
Maven
 2.13.0 up to 2.13.4.2, plus listed versions
2.13.12.13.22.13.2.12.13.2.22.13.32.13.42.13.4.1
2.13.4.2
jackson-databind
Mageia:9
From an advisory covering 3 CVEs
 before 2.11.4-2.1.mga9
2.11.4-2.1.mga9
jackson-databind
openEuler:20.03-LTS-SP1
From an advisory covering 3 CVEs
 before 2.9.8-10.oe1
2.9.8-10.oe1
jackson-databind
openEuler:20.03-LTS-SP3
From an advisory covering 3 CVEs
 before 2.9.8-10.oe1
2.9.8-10.oe1
jackson-databind
openEuler:22.03-LTS
From an advisory covering 3 CVEs
 before 2.9.8-10.oe2203sp2
2.9.8-10.oe2203sp2
jackson-databind
openEuler:22.03-LTS-SP1
From an advisory covering 3 CVEs
 before 2.9.8-10.oe2203sp1
2.9.8-10.oe2203sp1
jackson-databind
openEuler:22.03-LTS-SP2
From an advisory covering 3 CVEs
 before 2.9.8-10.oe2203sp2
2.9.8-10.oe2203sp2
jackson-databind
openEuler:20.03-LTS-SP4
From an advisory covering 3 CVEs
 before 2.9.8-10.oe2003sp4
2.9.8-10.oe2003sp4
rubygem-activerecord
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.6-2.el8sat
0:6.0.6-2.el8sat
foreman
Red Hat:satellite_capsule:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-debug
Red Hat:satellite_capsule:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
python-pulp-container
Red Hat:satellite_capsule:6.12::el8
From an advisory covering 3 CVEs
 before 0:2.10.10-1.el8pc
0:2.10.10-1.el8pc
python-pulp-rpm
Red Hat:satellite_capsule:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.18.9-1.el8pc
0:3.18.9-1.el8pc
python-pulpcore
Red Hat:satellite_capsule:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.18.11-1.el8pc
0:3.18.11-1.el8pc
python39-pulp-container
Red Hat:satellite_capsule:6.12::el8
From an advisory covering 3 CVEs
 before 0:2.10.10-1.el8pc
0:2.10.10-1.el8pc
python39-pulp-rpm
Red Hat:satellite_capsule:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.18.9-1.el8pc
0:3.18.9-1.el8pc
python39-pulpcore
Red Hat:satellite_capsule:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.18.11-1.el8pc
0:3.18.11-1.el8pc
rubygem-smart_proxy_container_gateway
Red Hat:satellite_capsule:6.12::el8
From an advisory covering 3 CVEs
 before 0:1.0.7-1.el8sat
0:1.0.7-1.el8sat
satellite
Red Hat:satellite_capsule:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.12.1-1.el8sat
0:6.12.1-1.el8sat
satellite-capsule
Red Hat:satellite_capsule:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.12.1-1.el8sat
0:6.12.1-1.el8sat
satellite-common
Red Hat:satellite_capsule:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.12.1-1.el8sat
0:6.12.1-1.el8sat
satellite-clone
Red Hat:satellite_maintenance:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.2.0-2.el8sat
0:3.2.0-2.el8sat
foreman
Red Hat:satellite_utils:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-cli
Red Hat:satellite_utils:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
satellite
Red Hat:satellite_utils:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.12.1-1.el8sat
0:6.12.1-1.el8sat
satellite-cli
Red Hat:satellite_utils:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.12.1-1.el8sat
0:6.12.1-1.el8sat
candlepin
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:4.1.18-1.el8sat
0:4.1.18-1.el8sat
candlepin-selinux
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:4.1.18-1.el8sat
0:4.1.18-1.el8sat
foreman
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-cli
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-debug
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-ec2
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-gce
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-journald
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-libvirt
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-openstack
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-ovirt
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-postgresql
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-service
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-telemetry
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
foreman-vmware
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.3.0.18-1.el8sat
0:3.3.0.18-1.el8sat
python-pulp-container
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:2.10.10-1.el8pc
0:2.10.10-1.el8pc
python-pulp-rpm
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.18.9-1.el8pc
0:3.18.9-1.el8pc
python-pulpcore
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.18.11-1.el8pc
0:3.18.11-1.el8pc
python39-pulp-container
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:2.10.10-1.el8pc
0:2.10.10-1.el8pc
python39-pulp-rpm
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.18.9-1.el8pc
0:3.18.9-1.el8pc
python39-pulpcore
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.18.11-1.el8pc
0:3.18.11-1.el8pc
rubygem-actioncable
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.6-2.el8sat
0:6.0.6-2.el8sat
rubygem-actionmailbox
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.6-2.el8sat
0:6.0.6-2.el8sat
rubygem-actionmailer
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.6-2.el8sat
0:6.0.6-2.el8sat
rubygem-actionpack
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.6-2.el8sat
0:6.0.6-2.el8sat
rubygem-actiontext
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.6-2.el8sat
0:6.0.6-2.el8sat
rubygem-actionview
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.6-2.el8sat
0:6.0.6-2.el8sat
rubygem-activejob
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.6-2.el8sat
0:6.0.6-2.el8sat
rubygem-activemodel
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.6-2.el8sat
0:6.0.6-2.el8sat
rubygem-activestorage
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.6-2.el8sat
0:6.0.6-2.el8sat
rubygem-activesupport
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.6-1.el8sat
0:6.0.6-1.el8sat
rubygem-foreman_rh_cloud
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.44-1.el8sat
0:6.0.44-1.el8sat
rubygem-foreman_webhooks
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:3.0.5-1.1.el8sat
0:3.0.5-1.1.el8sat
rubygem-katello
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:4.5.0.22-1.el8sat
0:4.5.0.22-1.el8sat
rubygem-rails
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.6-2.el8sat
0:6.0.6-2.el8sat
rubygem-railties
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.0.6-2.el8sat
0:6.0.6-2.el8sat
rubygem-smart_proxy_container_gateway
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:1.0.7-1.el8sat
0:1.0.7-1.el8sat
satellite
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.12.1-1.el8sat
0:6.12.1-1.el8sat
satellite-cli
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.12.1-1.el8sat
0:6.12.1-1.el8sat
satellite-common
Red Hat:satellite:6.12::el8
From an advisory covering 3 CVEs
 before 0:6.12.1-1.el8sat
0:6.12.1-1.el8sat
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:3.3.16-1.Final_redhat_00001.1.el7eap
0:3.3.16-1.Final_redhat_00001.1.el7eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el7eap
0:1.15.16-1.Final_redhat_00001.1.el7eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el7eap
0:1.15.16-1.Final_redhat_00001.1.el7eap
eap7-jettison
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.2-1.redhat_00002.1.el7eap
0:1.5.2-1.redhat_00002.1.el7eap
eap7-woodstox-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:6.4.0-1.redhat_00001.1.el7eap
0:6.4.0-1.redhat_00001.1.el7eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-apache-sshd
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.9.2-1.redhat_00001.1.el7eap
0:2.9.2-1.redhat_00001.1.el7eap
eap7-elytron-web
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el7eap
0:1.9.3-1.Final_redhat_00001.1.el7eap
eap7-hibernate-search
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-backend-jgroups
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-backend-jms
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-engine
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-orm
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-serialization-avro
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-javaee-security-soteria
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el7eap
0:1.0.1-3.redhat_00003.1.el7eap
eap7-javaee-security-soteria-enterprise
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el7eap
0:1.0.1-3.redhat_00003.1.el7eap
eap7-jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:4.0.49-1.Final_redhat_00001.1.el7eap
0:4.0.49-1.Final_redhat_00001.1.el7eap
eap7-jboss-jsf-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:3.0.0-6.SP07_redhat_00001.1.el7eap
0:3.0.0-6.SP07_redhat_00001.1.el7eap
eap7-jboss-jsp-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.0.0-3.Final_redhat_00001.1.el7eap
0:2.0.0-3.Final_redhat_00001.1.el7eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.0.27-1.Final_redhat_00001.1.el7eap
0:5.0.27-1.Final_redhat_00001.1.el7eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el7eap
0:1.10.0-24.Final_redhat_00023.1.el7eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el7eap
0:1.10.0-24.Final_redhat_00023.1.el7eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el7eap
0:1.10.0-24.Final_redhat_00023.1.el7eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.2.22-1.SP3_redhat_00001.1.el7eap
0:2.2.22-1.SP3_redhat_00001.1.el7eap
eap7-undertow-server
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el7eap
0:1.9.3-1.Final_redhat_00001.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:3.3.16-1.Final_redhat_00001.1.el8eap
0:3.3.16-1.Final_redhat_00001.1.el8eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el8eap
0:1.15.16-1.Final_redhat_00001.1.el8eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el8eap
0:1.15.16-1.Final_redhat_00001.1.el8eap
eap7-jettison
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.2-1.redhat_00002.1.el8eap
0:1.5.2-1.redhat_00002.1.el8eap
eap7-woodstox-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:6.4.0-1.redhat_00001.1.el8eap
0:6.4.0-1.redhat_00001.1.el8eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-apache-sshd
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.9.2-1.redhat_00001.1.el8eap
0:2.9.2-1.redhat_00001.1.el8eap
eap7-elytron-web
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el8eap
0:1.9.3-1.Final_redhat_00001.1.el8eap
eap7-hibernate-search
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-backend-jgroups
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-backend-jms
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-engine
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-orm
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-serialization-avro
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-javaee-security-soteria
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el8eap
0:1.0.1-3.redhat_00003.1.el8eap
eap7-javaee-security-soteria-enterprise
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el8eap
0:1.0.1-3.redhat_00003.1.el8eap
eap7-jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:4.0.49-1.Final_redhat_00001.1.el8eap
0:4.0.49-1.Final_redhat_00001.1.el8eap
eap7-jboss-jsf-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:3.0.0-6.SP07_redhat_00001.1.el8eap
0:3.0.0-6.SP07_redhat_00001.1.el8eap
eap7-jboss-jsp-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.0.0-3.Final_redhat_00001.1.el8eap
0:2.0.0-3.Final_redhat_00001.1.el8eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.0.27-1.Final_redhat_00001.1.el8eap
0:5.0.27-1.Final_redhat_00001.1.el8eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el8eap
0:1.10.0-24.Final_redhat_00023.1.el8eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el8eap
0:1.10.0-24.Final_redhat_00023.1.el8eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el8eap
0:1.10.0-24.Final_redhat_00023.1.el8eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.2.22-1.SP3_redhat_00001.1.el8eap
0:2.2.22-1.SP3_redhat_00001.1.el8eap
eap7-undertow-server
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el8eap
0:1.9.3-1.Final_redhat_00001.1.el8eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el8eap
0:7.4.9-4.GA_redhat_00003.1.el8eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el8eap
0:7.4.9-4.GA_redhat_00003.1.el8eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el8eap
0:7.4.9-4.GA_redhat_00003.1.el8eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:3.3.16-1.Final_redhat_00001.1.el9eap
0:3.3.16-1.Final_redhat_00001.1.el9eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el9eap
0:1.15.16-1.Final_redhat_00001.1.el9eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el9eap
0:1.15.16-1.Final_redhat_00001.1.el9eap
eap7-jettison
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.2-1.redhat_00002.1.el9eap
0:1.5.2-1.redhat_00002.1.el9eap
eap7-woodstox-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:6.4.0-1.redhat_00001.1.el9eap
0:6.4.0-1.redhat_00001.1.el9eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-apache-sshd
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.9.2-1.redhat_00001.1.el9eap
0:2.9.2-1.redhat_00001.1.el9eap
eap7-elytron-web
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el9eap
0:1.9.3-1.Final_redhat_00001.1.el9eap
eap7-hibernate-search
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-backend-jgroups
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-backend-jms
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-engine
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-orm
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-serialization-avro
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-javaee-security-soteria
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el9eap
0:1.0.1-3.redhat_00003.1.el9eap
eap7-javaee-security-soteria-enterprise
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el9eap
0:1.0.1-3.redhat_00003.1.el9eap
eap7-jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:4.0.49-1.Final_redhat_00001.1.el9eap
0:4.0.49-1.Final_redhat_00001.1.el9eap
eap7-jboss-jsf-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:3.0.0-6.SP07_redhat_00001.1.el9eap
0:3.0.0-6.SP07_redhat_00001.1.el9eap
com.fasterxml.jackson.core:jackson-databind
Root:Maven
 before 2.12.7-aikido.1
2.12.7-aikido.12.13.2.2-aikido.22.12.5-aikido.12.13.4-aikido.12.12.3-aikido.12.12.3-aikido.22.12.4-aikido.12.13.2.2-aikido.32.10.1-aikido.22.13.4-aikido.22.10.1-aikido.32.12.4-aikido.22.12.5-aikido.22.12.3-aikido.32.13.4-aikido.32.10.1-aikido.42.12.5-aikido.32.12.3-aikido.42.13.4-aikido.42.12.4-aikido.32.13.2.2-aikido.42.12.3-aikido.52.12.4-aikido.42.10.1-aikido.52.13.4-aikido.52.12.5-aikido.42.12.6.1-aikido.12.13.0-aikido.12.12.6.1-aikido.22.12.7-aikido.22.13.2.2-aikido.52.13.4.2-aikido.12.13.4.2-aikido.22.12.7.1-aikido.12.12.7.1-aikido.22.12.7.1-aikido.32.13.4.2-aikido.3
io.root.com.fasterxml.jackson.core:jackson-databind
Root:Maven
 before 2.13.2.2-root.io.1
2.13.2.2-root.io.12.12.7-root.io.12.13.3-root.io.22.13.2.2-root.io.22.12.5-root.io.12.13.4-root.io.12.12.3-root.io.12.12.3-root.io.22.12.4-root.io.12.13.2.2-root.io.32.10.1-root.io.22.13.4-root.io.22.10.1-root.io.32.12.4-root.io.22.12.5-root.io.22.12.3-root.io.32.13.4-root.io.32.10.1-root.io.42.12.5-root.io.32.12.3-root.io.42.13.4-root.io.42.12.4-root.io.32.13.2.2-root.io.42.12.3-root.io.52.12.4-root.io.42.10.1-root.io.52.13.4-root.io.52.12.5-root.io.42.12.6.1-root.io.12.13.0-root.io.12.12.6.1-root.io.22.12.7-root.io.22.13.2.2-root.io.52.13.4.2-root.io.12.13.4.2-root.io.22.12.7.1-root.io.12.12.7.1-root.io.22.12.7.1-root.io.32.13.4.2-root.io.3
jackson-databind
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
SUSE:Linux Enterprise Module for Development Tools 15 SP3
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
SUSE:Manager Server Module 4.3
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
SUSE:Manager Proxy 4.1
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
SUSE:Manager Server 4.1
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
SUSE:Enterprise Storage 7
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 2.13.4.2-150200.3.12.1
2.13.4.2-150200.3.12.1
jackson-databind
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.8.6-12.9.1-12.9.4-12.9.5-12.9.8-1~18.04
 None known
jackson-databind
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.9.9.3-12.10.0-22.10.1-12.10.2-1
 None known
jackson-databind
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.12.1-12.12.5-12.13.0-12.13.0-2
 None known
jackson-databind
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.14.0-1
 None known
jackson-databind
Ubuntu:25.10
 All versions, plus listed versions
2.14.0+ds-1
 None known
jackson-databind
Ubuntu:26.10
 All versions, plus listed versions
2.14.0+ds-1build12.14.0+ds-2
 None known
jackson-databind
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.14.0+ds-12.14.0+ds-1build1
 None known
java-jwt
openSUSE:Tumbleweed
 before 4.4.0-1.1
4.4.0-1.1

History

History
RecordedChangedSources
affectedOSV
affected
affected, aliases, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-42003 is a high vulnerability (CVSS 7.5) in Fasterxml Jackson-databind, published October 2, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.41%, the 88th percentile. Fixed in com.fasterxml.jackson.core:jackson-databind 2.12.7.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 674 package rows, 83 versions and 597 references. The JSON record has them. Also not on the record: 957 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 44 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open