[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXsqop0e5PtcwtpMdsODGmnkgpUa_i8GKqzsqtFkVKGc":3,"g5a-family:redhat\u002Fdecision_manager":113,"g5a-ex:redhat\u002Fdecision_manager@*":114},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":86,"seoMetadata":91,"meta":110},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"redhat","decision_manager",4,20,1,"2023-10-10",[14,17,22,24],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},"7.0",14,{"version":18,"cve_count":19,"kev_count":20,"has_kev":21},"7.3.1",5,0,false,{"version":23,"cve_count":20,"kev_count":20,"has_kev":21},"7.4.0",{"version":25,"cve_count":11,"kev_count":20,"has_kev":21},"7.5.1","Decision Manager by Redhat is a technology product with 4 tracked versions and 20 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},{"version":18,"cve_count":19,"kev_count":20,"has_kev":21},{"version":23,"cve_count":20,"kev_count":20,"has_kev":21},{"version":25,"cve_count":11,"kev_count":20,"has_kev":21},[33,40,48,51,54,59,63,68,75,81],{"cveId":34,"description":35,"publishedDate":12,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":4,"epssScore":39},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.",7.5,"v3.1","High",0.99999,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":21,"epssScore":47},"CVE-2018-19360","FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.","2019-01-02",9.8,"v3.0","Critical",0.10599,{"cveId":49,"description":50,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":21,"epssScore":47},"CVE-2018-19361","FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.",{"cveId":52,"description":53,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":21,"epssScore":47},"CVE-2018-19362","FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.",{"cveId":55,"description":56,"publishedDate":57,"cvssScore":36,"cvssVersion":45,"severity":38,"isKev":21,"epssScore":58},"CVE-2018-12023","An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JDBC jar in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.","2019-03-21",0.08872,{"cveId":60,"description":61,"publishedDate":57,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":21,"epssScore":62},"CVE-2018-12022","An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.",0.07289,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":44,"cvssVersion":37,"severity":46,"isKev":21,"epssScore":67},"CVE-2019-14892","A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code.","2020-03-02",0.05576,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":45,"severity":73,"isKev":21,"epssScore":74},"CVE-2017-7545","It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potentially, perform other more advanced XML eXternal Entity (XXE) attacks.","2018-07-26",6.5,"Medium",0.02744,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":37,"severity":38,"isKev":21,"epssScore":80},"CVE-2020-1714","A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Objects, which would then get deserialized in a privileged context and potentially lead to remote code execution.","2020-05-13",8.8,0.02604,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":72,"cvssVersion":37,"severity":73,"isKev":21,"epssScore":85},"CVE-2019-14900","A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.","2020-07-06",0.02126,[87],{"cveId":34,"description":35,"publishedDate":12,"cvssScore":36,"severity":38,"isKev":4,"epssScore":39,"cisaVulnName":88,"cisaDateAdded":12,"cisaShortDescription":89,"cisaRequiredAction":90},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":92,"metaDescription":93,"keywords":94,"structuredData":95},"Decision Manager by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Decision Manager by Redhat covering 4 versions with 20 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Decision Manager vulnerabilities, Decision Manager security, Decision Manager CVE, Redhat Decision Manager, Decision Manager threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Decision Manager KEV, Decision Manager exploited vulnerabilities",{"@context":96,"@type":97,"name":98,"description":93,"url":99,"manufacturer":100,"applicationCategory":104,"softwareVersion":105,"mainEntity":106},"https:\u002F\u002Fschema.org","SoftwareApplication","Decision Manager","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fdecision_manager",{"@type":101,"name":102,"url":103},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","4 versions tracked",{"@type":107,"name":108,"description":109,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Decision Manager Security Vulnerabilities","Security vulnerabilities affecting Decision Manager by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":111,"apiVersion":112},"2026-10-17T14:28:18.522Z","3.0",[],{"rows":115,"total":11,"capped":21,"failed":20},[116],{"cveId":34,"name":88,"severity":38,"cvss":36,"added":12,"epss":39,"published":117,"ranges":118,"checked":4,"hits":119,"covers":21},"2023-10-10T14:15:10.883",[15],[]]