fasterxml jackson-databind, netapp oncommand api services, netapp oncommand workflow automation +32 lainnya
CVSS 7.5 · High EPSS 17,3%
Kerentanan Improper Restriction of XML External Entity Reference pada fasterxml jackson-databind, netapp oncommand api services +33 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| fasterxml | jackson-databind | Versi 2.6.0 hingga sebelum 2.6.7.4 |
| fasterxml | jackson-databind | Versi 2.9.0 hingga sebelum 2.9.10.7 |
| fasterxml | jackson-databind | Versi 2.10.0 hingga sebelum 2.10.5.1 |
| netapp | oncommand api services | Semua versi |
| netapp | oncommand workflow automation | Semua versi |
| netapp | service level manager | Semua versi |
| fedoraproject | fedora | Versi 32 |
| quarkus | quarkus | Semua versi hingga 1.6.1 |
| apache | iotdb | Semua versi sebelum 0.12.0 |
| oracle | agile product lifecycle management | Versi 9.3.6 |
| oracle | agile product lifecycle management integration pack | Versi 3.6 |
| oracle | banking apis | Versi 18.1 hingga 18.3 |
| oracle | banking apis | Versi 19.1 |
| oracle | banking apis | Versi 19.2 |
| oracle | banking apis | Versi 20.1 |
| oracle | banking apis | Versi 21.1 |
| oracle | banking platform | Versi 2.6.2 |
| oracle | banking platform | Versi 2.7.0 |
| oracle | banking platform | Versi 2.7.1 |
| oracle | banking platform | Versi 2.8.0 |
| oracle | banking platform | Versi 2.9.0 |
| oracle | banking platform | Versi 2.10.0 |
| oracle | banking treasury management | Versi 4.4 |
| oracle | blockchain platform | Semua versi sebelum 21.1.2 |
| oracle | coherence | Versi 12.2.1.4.0 |
| oracle | coherence | Versi 14.1.1.0.0 |
| oracle | commerce platform | Versi 11.3.0 hingga 11.3.2 |
| oracle | commerce platform | Versi 11.2.0 |
| oracle | communications billing and revenue management | Versi 7.5.0.23.0 |
| oracle | communications billing and revenue management | Versi 12.0.0.3.0 |
| oracle | communications cloud native core unified data repository | Versi 1.4.0 |
| oracle | communications convergent charging controller | Versi 12.0.4.0.0 |
| oracle | communications evolved communications application server | Versi 7.1 |
| oracle | communications instant messaging server | Versi 10.0.1.5.0 |
| oracle | communications interactive session recorder | Versi 6.3 |
| oracle | communications interactive session recorder | Versi 6.4 |
| oracle | communications network charging and control | Versi 12.0.4.0.0 |
| oracle | communications offline mediation controller | Versi 12.0.0.3 |
| oracle | communications pricing design center | Versi 12.0.0.4.0 |
| oracle | communications services gatekeeper | Versi 7.0 |
| oracle | communications unified inventory management | Versi 7.4.1 |
| oracle | goldengate application adapters | Versi 19.1.0.0.0 |
| oracle | health sciences empirica signal | Versi 9.0 |
| oracle | health sciences empirica signal | Versi 9.1 |
| oracle | insurance policy administration | Versi 11.1.0 hingga 11.3.0 |
| oracle | insurance policy administration | Versi 11.0.2 |
| oracle | insurance rules palette | Versi 11.1.0 hingga 11.3.0 |
| oracle | insurance rules palette | Versi 11.0.2 |
| oracle | jd edwards enterpriseone orchestrator | Semua versi sebelum 9.2.5.3 |
| oracle | jd edwards enterpriseone tools | Semua versi sebelum 9.2.5.3 |
| oracle | primavera gateway | Versi 17.7 hingga 17.12 |
| oracle | primavera gateway | Versi 17.12.0 hingga 17.12.11 |
| oracle | primavera gateway | Versi 18.8.0 hingga 18.8.11 |
| oracle | primavera gateway | Versi 19.12.0 hingga 19.12.10 |
| oracle | primavera gateway | Versi 20.12.0 |
| oracle | retail service backbone | Versi 14.1.3.2 |
| oracle | retail service backbone | Versi 15.0.3.1 |
| oracle | retail service backbone | Versi 16.0.3 |
| oracle | retail xstore point of service | Versi 16.0.6 |
| oracle | retail xstore point of service | Versi 17.0.4 |