[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjXJlBZrp2rOWvMyGUzIwfKt0ORWi7Y1S1zpdV9CkxaE":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":63,"kevVulnerabilities":122,"topProductsByCves":123,"seoMetadata":133,"meta":142},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":62},10381,"fasterxml",9,77,0,638,"2023-08-08","f",[16,22,28,33,38,43,48,53,58],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},44843,"jackson-databind",153,70,"2023-06-14",{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":11,"last_cve_update":27},44846,"jackson-dataformat-xml",80,2,"2017-04-14",{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":11,"last_cve_update":13},44845,"jackson-dataformats-text",43,1,{"id":34,"product_name":35,"version_count":36,"cve_count":32,"kev_count":11,"last_cve_update":37},44849,"woodstox",28,"2022-09-16",{"id":39,"product_name":40,"version_count":41,"cve_count":32,"kev_count":11,"last_cve_update":42},44844,"jackson-dataformats-binary",73,"2021-02-18",{"id":44,"product_name":45,"version_count":46,"cve_count":32,"kev_count":11,"last_cve_update":47},44847,"jackson-mapper-asl",14,"2019-11-18",{"id":49,"product_name":50,"version_count":51,"cve_count":32,"kev_count":11,"last_cve_update":52},44848,"jackson-modules-java8",31,"2018-12-20",{"id":54,"product_name":55,"version_count":56,"cve_count":11,"kev_count":11,"last_cve_update":57},44842,"jackson-core",141,null,{"id":59,"product_name":60,"version_count":61,"cve_count":11,"kev_count":11,"last_cve_update":57},44841,"jackson",75,"Fasterxml is a technology vendor with 9 tracked products and 77 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[64,73,80,85,90,97,103,108,113,117],{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":71,"epssScore":72},"CVE-2017-17485","FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath.","2018-01-10",9.8,"v3.1","Critical",false,0.49727,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":69,"severity":78,"isKev":71,"epssScore":79},"CVE-2019-12384","FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.","2019-06-24",5.9,"Medium",0.45205,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":71,"epssScore":84},"CVE-2017-7525","A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.","2018-02-06",0.37721,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":71,"epssScore":89},"CVE-2020-8840","FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect\u002FJNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.","2020-02-10",0.26587,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"cvssVersion":69,"severity":95,"isKev":71,"epssScore":96},"CVE-2019-12086","A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.","2019-05-17",7.5,"High",0.21949,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":68,"cvssVersion":101,"severity":70,"isKev":71,"epssScore":102},"CVE-2018-7489","FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.","2018-02-26","v3.0",0.19781,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":71,"epssScore":107},"CVE-2020-9548","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).","2020-03-02",0.18921,{"cveId":109,"description":110,"publishedDate":37,"cvssScore":111,"cvssVersion":69,"severity":78,"isKev":71,"epssScore":112},"CVE-2022-40152","Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.",6.5,0.1873,{"cveId":114,"description":115,"publishedDate":106,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":71,"epssScore":116},"CVE-2020-9547","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).",0.18383,{"cveId":118,"description":119,"publishedDate":120,"cvssScore":94,"cvssVersion":69,"severity":95,"isKev":71,"epssScore":121},"CVE-2020-25649","A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.","2020-12-03",0.17714,[],[124,125,126,127,128,129,130,131,132],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":11,"last_cve_update":27},{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":11,"last_cve_update":13},{"id":34,"product_name":35,"version_count":36,"cve_count":32,"kev_count":11,"last_cve_update":37},{"id":39,"product_name":40,"version_count":41,"cve_count":32,"kev_count":11,"last_cve_update":42},{"id":44,"product_name":45,"version_count":46,"cve_count":32,"kev_count":11,"last_cve_update":47},{"id":49,"product_name":50,"version_count":51,"cve_count":32,"kev_count":11,"last_cve_update":52},{"id":54,"product_name":55,"version_count":56,"cve_count":11,"kev_count":11,"last_cve_update":57},{"id":59,"product_name":60,"version_count":61,"cve_count":11,"kev_count":11,"last_cve_update":57},{"title":134,"metaDescription":135,"keywords":136,"structuredData":137},"Fasterxml - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Fasterxml covering 9 products with 77 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Fasterxml vulnerabilities, Fasterxml security, Fasterxml CVE, Fasterxml threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":138,"@type":139,"name":140,"description":135,"url":141},"https:\u002F\u002Fschema.org","Organization","Fasterxml","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ffasterxml",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":143,"apiVersion":144},"2026-10-17T12:43:18.905Z","3.0"]