jackson-module-jaxb-annotations vulnerabilities (Red Hat)
53 vulnerabilities.
-
jackson-module-jaxb-annotationsRed Hat jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation 8.1 High -
jackson-module-jaxb-annotationsRed Hat jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) 8.1 High -
jackson-module-jaxb-annotationsRed Hat Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled 7.5 High -
jackson-module-jaxb-annotationsRed Hat jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data 8.7 High -
jackson-module-jaxb-annotationsRed Hat Apache Tomcat: Bypass of rules in Rewrite Valve 9.8 Critical -
jackson-module-jaxb-annotationsRed Hat Apache Tomcat: Denial of Service 8.6 High -
jackson-module-jaxb-annotationsRed Hat Deeply nested json in jackson-databind 7.5 High -
jackson-module-jaxb-annotationsRed Hat Response mix-up with WebSocket concurrent send and close 8.6 High -
jackson-module-jaxb-annotationsRed Hat A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a... 6.1 Medium -
jackson-module-jaxb-annotationsRed Hat A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it... 6.1 Medium -
jackson-module-jaxb-annotationsRed Hat In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests... 6.8 Medium -
jackson-module-jaxb-annotationsRed Hat Improper Input Validation in RESTEasy 7.5 High -
jackson-module-jaxb-annotationsRed Hat Potential XSS vulnerability in jQuery 6.9 Medium -
jackson-module-jaxb-annotationsRed Hat jQuery has a potential XSS vulnerability 6.9 Medium -
jackson-module-jaxb-annotationsRed Hat A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA)... 4.3 Medium -
jackson-module-jaxb-annotationsRed Hat A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where... 4.3 Medium -
jackson-module-jaxb-annotationsRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 8.8 High -
jackson-module-jaxb-annotationsRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 8.8 High -
jackson-module-jaxb-annotationsRed Hat A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the... 4.7 Medium -
jackson-module-jaxb-annotationsRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
jackson-module-jaxb-annotationsRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
jackson-module-jaxb-annotationsRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
jackson-module-jaxb-annotationsRed Hat Improper Privilege Management in Tomcat 9.8 Critical -
jackson-module-jaxb-annotationsRed Hat Potential HTTP request smuggling in Apache Tomcat 4.8 Medium -
jackson-module-jaxb-annotationsRed Hat Deserialization of Untrusted Data in jackson-databind 9.8 Critical -
jackson-module-jaxb-annotationsRed Hat Deserialization of Untrusted Data in jackson-databind 9.8 Critical -
jackson-module-jaxb-annotationsRed Hat Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token... 6.5 Medium -
jackson-module-jaxb-annotationsRed Hat jackson-databind polymorphic typing issue 9.8 Critical -
jackson-module-jaxb-annotationsRed Hat jackson-databind polymorphic typing issue 9.8 Critical -
jackson-module-jaxb-annotationsRed Hat Polymorphic Typing in FasterXML jackson-databind 9.8 Critical -
jackson-module-jaxb-annotationsRed Hat Polymorphic Typing issue in FasterXML jackson-databind 9.8 Critical -
jackson-module-jaxb-annotationsRed Hat Polymorphic Typing issue in FasterXML jackson-databind 9.8 Critical -
jackson-module-jaxb-annotationsRed Hat Deserialization of Untrusted Data in FasterXML jackson-databind 5.9 Medium -
jackson-module-jaxb-annotationsRed Hat Deserialization of untrusted data in FasterXML jackson-databind 5.9 Medium -
jackson-module-jaxb-annotationsRed Hat Information exposure in FasterXML jackson-databind 7.5 High -
jackson-module-jaxb-annotationsRed Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products 6.1 Medium -
jackson-module-jaxb-annotationsRed Hat Bootstrap Vulnerable to Cross-Site Scripting 6.1 Medium -
jackson-module-jaxb-annotationsRed Hat Bootstrap Cross-site Scripting vulnerability 6.1 Medium -
jackson-module-jaxb-annotationsRed Hat Apache Tomcat Open Redirect vulnerability 4.3 Medium -
jackson-module-jaxb-annotationsRed Hat Apache Tomcat Race Condition vulnerability 5.9 Medium -
jackson-module-jaxb-annotationsRed Hat The host name verification missing in Apache Tomcat 7.5 High -
jackson-module-jaxb-annotationsRed Hat Bootstrap Cross-site Scripting vulnerability 6.1 Medium -
jackson-module-jaxb-annotationsRed Hat Bootstrap vulnerable to Cross-Site Scripting (XSS) 6.1 Medium -
jackson-module-jaxb-annotationsRed Hat The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins 9.8 Critical -
jackson-module-jaxb-annotationsRed Hat Cross-Site Scripting (XSS) in jquery 6.1 Medium -
jackson-module-jaxb-annotationsRed Hat Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit... 6.0 Medium -
jackson-module-jaxb-annotationsRed Hat Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,... 5.0 Medium -
jackson-module-jaxb-annotationsRed Hat Foreman before 1.7.5 allows remote authenticated users to bypass organization and location... 4.0 Medium -
jackson-module-jaxb-annotationsRed Hat Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in... 5.0 Medium -
jackson-module-jaxb-annotationsRed Hat Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1... 4.3 Medium - Show olderLoading…