[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foa-jWqxF1zYlnejWHr7qMUzbsiCPCGyUIDIYZzqcqWE":3,"g5a-risk:CVE-2017-7525":573},{"success":4,"data":5,"meta":571},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":196,"references":197,"referencesCount":358,"weaknesses":359,"weaknessesCount":373,"isActivelyExploited":374,"cisaInfo":27,"otxData":27,"relatedBlogPosts":375,"seoMetadata":376,"configurations":401,"relatedVendorCves":555,"notableEvents":556},"CVE-2017-7525","What is CVE-2017-7525?","A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.","A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perfo...","2018-02-06T15:29:00.297","2023-11-07T02:50:11.807",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.37721,[39,39,39,39,39,39,39],"Critical",[43,48,51,56,59,64,67,70,73,78,82,85,89,93,96,98,101,104,107,110,115,118,121,124,128,131,134,137,141,144,148,151,154,158,161,164,167,170,173,176,179,182,185,188,192],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"fasterxml","jackson-databind","*","cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"2.9.0","cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease1:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":57,"criteria":58,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":62,"criteria":63,"vulnerable":4},"netapp","oncommand_balance","-","cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",{"vendor":60,"product":65,"version":62,"criteria":66,"vulnerable":4},"oncommand_performance_manager","cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:linux:*:*",{"vendor":60,"product":68,"version":62,"criteria":69,"vulnerable":4},"oncommand_shift","cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*",{"vendor":60,"product":71,"version":62,"criteria":72,"vulnerable":4},"snapcenter","cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",{"vendor":74,"product":75,"version":76,"criteria":77,"vulnerable":4},"redhat","openshift_container_platform","4.1","cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*",{"vendor":74,"product":79,"version":80,"criteria":81,"vulnerable":4},"virtualization","4.0","cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",{"vendor":74,"product":83,"version":80,"criteria":84,"vulnerable":4},"virtualization_host","cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*",{"vendor":74,"product":86,"version":87,"criteria":88,"vulnerable":4},"enterprise_linux_server","7.0","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",{"vendor":74,"product":90,"version":91,"criteria":92,"vulnerable":4},"jboss_enterprise_application_platform","6.0.0","cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",{"vendor":74,"product":90,"version":94,"criteria":95,"vulnerable":4},"6.4.0","cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",{"vendor":74,"product":90,"version":87,"criteria":97,"vulnerable":4},"cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*",{"vendor":74,"product":90,"version":99,"criteria":100,"vulnerable":4},"7.1","cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1:*:*:*:*:*:*:*",{"vendor":74,"product":86,"version":102,"criteria":103,"vulnerable":4},"6.0","cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",{"vendor":74,"product":86,"version":105,"criteria":106,"vulnerable":4},"5.0","cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",{"vendor":74,"product":75,"version":108,"criteria":109,"vulnerable":4},"3.11","cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",{"vendor":111,"product":112,"version":113,"criteria":114,"vulnerable":4},"oracle","banking_platform","2.5.0","cpe:2.3:a:oracle:banking_platform:2.5.0:*:*:*:*:*:*:*",{"vendor":111,"product":112,"version":116,"criteria":117,"vulnerable":4},"2.6.0","cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:*",{"vendor":111,"product":112,"version":119,"criteria":120,"vulnerable":4},"2.6.1","cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:*",{"vendor":111,"product":112,"version":122,"criteria":123,"vulnerable":4},"2.6.2","cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*",{"vendor":111,"product":125,"version":126,"criteria":127,"vulnerable":4},"communications_billing_and_revenue_management","7.5","cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5:*:*:*:*:*:*:*",{"vendor":111,"product":125,"version":129,"criteria":130,"vulnerable":4},"12.0","cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0:*:*:*:*:*:*:*",{"vendor":111,"product":132,"version":46,"criteria":133,"vulnerable":4},"communications_communications_policy_management","cpe:2.3:a:oracle:communications_communications_policy_management:*:*:*:*:*:*:*:*",{"vendor":111,"product":135,"version":46,"criteria":136,"vulnerable":4},"communications_diameter_signaling_route","cpe:2.3:a:oracle:communications_diameter_signaling_route:*:*:*:*:*:*:*:*",{"vendor":111,"product":138,"version":139,"criteria":140,"vulnerable":4},"communications_instant_messaging_server","10.0.1","cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1:*:*:*:*:*:*:*",{"vendor":111,"product":138,"version":142,"criteria":143,"vulnerable":4},"10.0.1.2.0","cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.2.0:*:*:*:*:*:*:*",{"vendor":111,"product":145,"version":146,"criteria":147,"vulnerable":4},"enterprise_manager_for_virtualization","13.2.2","cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.2.2:*:*:*:*:*:*:*",{"vendor":111,"product":145,"version":149,"criteria":150,"vulnerable":4},"13.2.3","cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.2.3:*:*:*:*:*:*:*",{"vendor":111,"product":145,"version":152,"criteria":153,"vulnerable":4},"13.3.1","cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.3.1:*:*:*:*:*:*:*",{"vendor":111,"product":155,"version":156,"criteria":157,"vulnerable":4},"financial_services_analytical_applications_infrastructure","8.0.2.0.0","cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.2.0.0:*:*:*:*:*:*:*",{"vendor":111,"product":155,"version":159,"criteria":160,"vulnerable":4},"8.0.3.0.0","cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.3.0.0:*:*:*:*:*:*:*",{"vendor":111,"product":155,"version":162,"criteria":163,"vulnerable":4},"8.0.4.0.0","cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.4.0.0:*:*:*:*:*:*:*",{"vendor":111,"product":155,"version":165,"criteria":166,"vulnerable":4},"8.0.5.0.0","cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.5.0.0:*:*:*:*:*:*:*",{"vendor":111,"product":155,"version":168,"criteria":169,"vulnerable":4},"8.0.6.0.0","cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.0.0:*:*:*:*:*:*:*",{"vendor":111,"product":155,"version":171,"criteria":172,"vulnerable":4},"8.0.7.0.0","cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.0.0:*:*:*:*:*:*:*",{"vendor":111,"product":174,"version":46,"criteria":175,"vulnerable":4},"global_lifecycle_management_opatchauto","cpe:2.3:a:oracle:global_lifecycle_management_opatchauto:*:*:*:*:*:*:*:*",{"vendor":111,"product":177,"version":46,"criteria":178,"vulnerable":4},"primavera_unifier","cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*",{"vendor":111,"product":177,"version":180,"criteria":181,"vulnerable":4},"16.1","cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*",{"vendor":111,"product":177,"version":183,"criteria":184,"vulnerable":4},"16.2","cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*",{"vendor":111,"product":177,"version":186,"criteria":187,"vulnerable":4},"18.8","cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*",{"vendor":111,"product":189,"version":190,"criteria":191,"vulnerable":4},"utilities_advanced_spatial_and_operational_analytics","2.7.0.1","cpe:2.3:a:oracle:utilities_advanced_spatial_and_operational_analytics:2.7.0.1:*:*:*:*:*:*:*",{"vendor":111,"product":193,"version":194,"criteria":195,"vulnerable":4},"webcenter_portal","12.2.1.3.0","cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",45,[198,204,207,210,215,219,222,225,229,232,235,238,241,244,247,250,253,256,259,262,265,268,271,274,277,280,283,286,289,292,295,298,301,304,308,312,316,319,322,325,328,331,334,337,340,343,346,349,352,355],{"url":199,"source":200,"tags":201},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpuapr2018-3678067.html","Oracle",[202,203],"Patch","Third Party Advisory",{"url":205,"source":200,"tags":206},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujul2018-4258247.html",[202,203],{"url":208,"source":200,"tags":209},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpuoct2018-4428296.html",[202,203],{"url":211,"source":212,"tags":213},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F99623","Securityfocus",[203,214],"VDB Entry",{"url":216,"source":217,"tags":218},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1039744","Securitytracker",[203,214],{"url":220,"source":217,"tags":221},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1039947",[203,214],{"url":223,"source":217,"tags":224},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1040360",[203,214],{"url":226,"source":227,"tags":228},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:1834","Red Hat",[203],{"url":230,"source":227,"tags":231},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:1835",[203],{"url":233,"source":227,"tags":234},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:1836",[203],{"url":236,"source":227,"tags":237},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:1837",[203],{"url":239,"source":227,"tags":240},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:1839",[203],{"url":242,"source":227,"tags":243},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:1840",[203],{"url":245,"source":227,"tags":246},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:2477",[203],{"url":248,"source":227,"tags":249},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:2546",[203],{"url":251,"source":227,"tags":252},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:2547",[203],{"url":254,"source":227,"tags":255},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:2633",[203],{"url":257,"source":227,"tags":258},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:2635",[203],{"url":260,"source":227,"tags":261},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:2636",[203],{"url":263,"source":227,"tags":264},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:2637",[203],{"url":266,"source":227,"tags":267},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:2638",[203],{"url":269,"source":227,"tags":270},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3141",[203],{"url":272,"source":227,"tags":273},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3454",[203],{"url":275,"source":227,"tags":276},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3455",[203],{"url":278,"source":227,"tags":279},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3456",[203],{"url":281,"source":227,"tags":282},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3458",[203],{"url":284,"source":227,"tags":285},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:0294",[203],{"url":287,"source":227,"tags":288},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:0342",[203],{"url":290,"source":227,"tags":291},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1449",[203],{"url":293,"source":227,"tags":294},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1450",[203],{"url":296,"source":227,"tags":297},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0910",[203],{"url":299,"source":227,"tags":300},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2858",[203],{"url":302,"source":227,"tags":303},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3149",[203],{"url":305,"source":227,"tags":306},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1462702",[307,203],"Issue Tracking",{"url":309,"source":310,"tags":311},"https:\u002F\u002Fcwiki.apache.org\u002Fconfluence\u002Fdisplay\u002FWW\u002FS2-055","Apache",[203],{"url":313,"source":314,"tags":315},"https:\u002F\u002Fgithub.com\u002FFasterXML\u002Fjackson-databind\u002Fissues\u002F1599","GitHub",[307,202,203],{"url":317,"source":314,"tags":318},"https:\u002F\u002Fgithub.com\u002FFasterXML\u002Fjackson-databind\u002Fissues\u002F1723",[307,203],{"url":320,"source":310,"tags":321},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F3c87dc8bca99a2b3b4743713b33d1de05b1d6b761fdf316224e9c81f%40%3Cdev.lucene.apache.org%3E",[],{"url":323,"source":310,"tags":324},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F4641ed8616ccc2c1fbddac2c3dc9900c96387bc226eaf0232d61909b%40%3Ccommits.cassandra.apache.org%3E",[],{"url":326,"source":310,"tags":327},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F5008bcbd45ee65ce39e4220b6ac53d28a24d6bc67d5804e9773a7399%40%3Csolr-user.lucene.apache.org%3E",[],{"url":329,"source":310,"tags":330},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E",[],{"url":332,"source":310,"tags":333},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E",[],{"url":335,"source":310,"tags":336},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fb1f33fe5ade396bb903fdcabe9f243f7692c7dfce5418d3743c2d346%40%3Cdev.lucene.apache.org%3E",[],{"url":338,"source":310,"tags":339},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fc10a2bf0fdc3d25faf17bd191d6ec46b29a353fa9c97bebd7c4e5913%40%3Cdev.lucene.apache.org%3E",[],{"url":341,"source":310,"tags":342},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fc2ed4c0126b43e324cf740012a0edd371fd36096fd777be7bfe7a2a6%40%3Cdev.lucene.apache.org%3E",[],{"url":344,"source":310,"tags":345},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fc9d5ff20929e8a3c8794facf4c4b326a9c10618812eec356caa20b87%40%3Csolr-user.lucene.apache.org%3E",[],{"url":347,"source":310,"tags":348},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Ff095a791bda6c0595f691eddd0febb2d396987eec5cbd29120d8c629%40%3Csolr-user.lucene.apache.org%3E",[],{"url":350,"source":310,"tags":351},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Ff60afd3c7e9ebaaf70fad4a4beb75cf8740ac959017a31e7006c7486%40%3Cdev.lucene.apache.org%3E",[],{"url":353,"source":310,"tags":354},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr42ac3e39e6265db12d9fc6ae1cd4b5fea7aed9830dc6f6d58228fed7%40%3Ccommits.cassandra.apache.org%3E",[],{"url":356,"source":310,"tags":357},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr68acf97f4526ba59a33cc6e592261ea4f85d890f99e79c82d57dd589%40%3Cissues.spark.apache.org%3E",[],50,[360,368],{"id":361,"name":362,"description":363,"extendedDescription":364,"status":365,"abstraction":366,"structure":367},"CWE-502","Deserialization of Untrusted Data","The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.","It is often convenient to serialize objects for communication or to save them for later use. However, deserialized data or code can often be modified without using the provided accessor functions if it does not use cryptography to protect itself. Furthermore, any cryptography would still be client-side security -- which is a dangerous security assumption.\nData that is untrusted can not be trusted to be well-formed.\nWhen developers place no restrictions on \"gadget chains,\" or series of instances and method invocations that can self-execute during the deserialization process (i.e., before the object is returned to the caller), it is sometimes possible for attackers to leverage them to perform unauthorized actions, like generating a shell.","Draft","Base","Simple",{"id":369,"name":370,"description":371,"extendedDescription":372,"status":365,"abstraction":366,"structure":367},"CWE-184","Incomplete List of Disallowed Inputs","The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete, leading to resultant weaknesses.","Developers often try to protect their products against malicious input by performing tests against inputs that are known to be bad, such as special characters that can invoke new commands.  However, such lists often only account for the most well-known bad inputs. Attackers may be able to find other malicious inputs that were not expected by the developer, allowing them to bypass the intended protection mechanism.",2,false,[],{"title":377,"metaDescription":378,"keywords":379,"canonicalUrl":380,"structuredData":381},"What is CVE-2017-7525? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-7525, a critical severity cyber security vulnerability from 2018. High exploit probability (37.7%). A deserialization flaw...","CVE-2017-7525, CVE-2017-7525 vulnerability, CVE-2017-7525 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, fasterxml security, debian security, netapp security, redhat security, jackson-databind vulnerability, debian_linux vulnerability, oncommand_balance vulnerability, oncommand_performance_manager vulnerability","\u002Fwhat-is\u002Fcve-2017-7525",{"@context":382,"@type":383,"headline":377,"description":378,"datePublished":10,"dateModified":11,"author":384,"publisher":388,"about":392,"mainEntityOfPage":396,"articleSection":399,"keywords":400},"https:\u002F\u002Fschema.org","TechArticle",{"@type":385,"name":386,"url":387},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":385,"name":386,"url":387,"logo":389},{"@type":390,"url":391},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":393,"name":6,"description":394,"additionalType":395},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":397,"@id":398},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-7525","Cybersecurity","CVE-2017-7525, CVE-2017-7525 vulnerability, CVE-2017-7525 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[402,423,431,446,461,478,488,494],{"Operator":27,"Negate":27,"Nodes":403},[404],{"Operator":405,"Negate":27,"CPEMatch":406},"OR",[407,410,414,418,420],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":408,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":409,"VersionEndIncluding":27},"2BD0008C-1562-400E-9E79-973384BAE68C","2.6.7.1",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":411,"VersionStartExcluding":27,"VersionStartIncluding":412,"VersionEndExcluding":413,"VersionEndIncluding":27},"350AD21A-F820-4106-BA80-84595398977D","2.7.0","2.7.9.1",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":415,"VersionStartExcluding":27,"VersionStartIncluding":416,"VersionEndExcluding":417,"VersionEndIncluding":27},"20D21D56-9399-40C1-A187-C0628E71EE56","2.8.0","2.8.9",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":419,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0BDA05E4-4693-4AA0-843B-476059E345CA",{"Vulnerable":4,"Criteria":421,"MatchCriteriaID":422,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease2:*:*:*:*:*:*","CF988893-BBEE-4BE3-949F-E4B8158B3046",{"Operator":27,"Negate":27,"Nodes":424},[425],{"Operator":405,"Negate":27,"CPEMatch":426},[427,429],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":428,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":430,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":27,"Negate":27,"Nodes":432},[433],{"Operator":405,"Negate":27,"CPEMatch":434},[435,437,439,442,444],{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":436,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":438,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"54E72B69-4E04-42A3-B532-53E98C6796D6",{"Vulnerable":4,"Criteria":440,"MatchCriteriaID":441,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*","698C6261-679D-45C1-A396-57AC96AD64D6",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":443,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3BD81527-A341-42C3-9AB9-880D3DB04B08",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":445,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94",{"Operator":447,"Negate":27,"Nodes":448},"AND",[449,457],{"Operator":405,"Negate":27,"CPEMatch":450},[451,453,455],{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":452,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"064E7BDD-4EF0-4A0D-A38D-8C75BAFEDCEF",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":454,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6BBD7A51-0590-4DDF-8249-5AFA8D645CB6",{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":456,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BB28F9AF-3D06-4532-B397-96D7E4792503",{"Operator":405,"Negate":27,"CPEMatch":458},[459],{"Vulnerable":27,"Criteria":88,"MatchCriteriaID":460,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"51EF4996-72F4-4FA4-814F-F5991E7A8318",{"Operator":447,"Negate":27,"Nodes":462},[463,473],{"Operator":405,"Negate":27,"CPEMatch":464},[465,467,469,471],{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":466,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B142ACCC-F7A9-4A3B-BE60-0D6691D5058D",{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":468,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B1ABA871-3271-48E2-A69C-5AD70AF94E53",{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":470,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"88BF3B2C-B121-483A-AEF2-8082F6DA5310",{"Vulnerable":4,"Criteria":100,"MatchCriteriaID":472,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7117F117-D439-45EB-BB95-397E5E52C9BB",{"Operator":405,"Negate":27,"CPEMatch":474},[475,477],{"Vulnerable":27,"Criteria":103,"MatchCriteriaID":476,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9BBCD86A-E6C7-4444-9D74-F861084090F0",{"Vulnerable":27,"Criteria":88,"MatchCriteriaID":460,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},{"Operator":447,"Negate":27,"Nodes":479},[480,484],{"Operator":405,"Negate":27,"CPEMatch":481},[482,483],{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":466,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":468,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},{"Operator":405,"Negate":27,"CPEMatch":485},[486],{"Vulnerable":27,"Criteria":106,"MatchCriteriaID":487,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"54D669D4-6D7E-449D-80C1-28FA44F06FFE",{"Operator":27,"Negate":27,"Nodes":489},[490],{"Operator":405,"Negate":27,"CPEMatch":491},[492],{"Vulnerable":4,"Criteria":109,"MatchCriteriaID":493,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2F87326E-0B56-4356-A889-73D026DB1D4B",{"Operator":27,"Negate":27,"Nodes":495},[496],{"Operator":405,"Negate":27,"CPEMatch":497},[498,500,502,504,506,508,510,513,516,518,520,522,524,526,528,530,532,534,536,538,541,545,547,549,551,553],{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":499,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"35AD0C07-9688-4397-8D45-FBB88C0F0C11",{"Vulnerable":4,"Criteria":117,"MatchCriteriaID":501,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8972497F-6E24-45A9-9A18-EB0E842CB1D4",{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":503,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"400509A8-D6F2-432C-A2F1-AD5B8778D0D9",{"Vulnerable":4,"Criteria":123,"MatchCriteriaID":505,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"132CE62A-FBFC-4001-81EC-35D81F73AF48",{"Vulnerable":4,"Criteria":127,"MatchCriteriaID":507,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E6039DC7-08F2-4DD9-B5B5-B6B22DD2409F",{"Vulnerable":4,"Criteria":130,"MatchCriteriaID":509,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7231AF76-3D46-41C4-83E9-6E9E12940BD9",{"Vulnerable":4,"Criteria":133,"MatchCriteriaID":511,"VersionStartExcluding":27,"VersionStartIncluding":129,"VersionEndExcluding":27,"VersionEndIncluding":512},"2914F3C1-E05D-4F70-A87F-D74A7F2AD163","12.5.2",{"Vulnerable":4,"Criteria":136,"MatchCriteriaID":514,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":515,"VersionEndIncluding":27},"7867B73E-38DD-4333-9D6B-868AAF299ABB","8.3",{"Vulnerable":4,"Criteria":140,"MatchCriteriaID":517,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"622B95F1-8FA4-4AA6-9B68-5FE4302BA150",{"Vulnerable":4,"Criteria":143,"MatchCriteriaID":519,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9615B3B8-B176-4359-97B5-D2E2FEE5BFEA",{"Vulnerable":4,"Criteria":147,"MatchCriteriaID":521,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A9E97F04-00ED-48E9-AB40-7A02B3419641",{"Vulnerable":4,"Criteria":150,"MatchCriteriaID":523,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FCCE5A11-39E7-4BBB-9E1A-BA4B754103BB",{"Vulnerable":4,"Criteria":153,"MatchCriteriaID":525,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A5AEC7F5-C353-4CF5-96CE-8C713A2B0C92",{"Vulnerable":4,"Criteria":157,"MatchCriteriaID":527,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CDBFC313-007A-427A-A23E-A8ACA726FC8F",{"Vulnerable":4,"Criteria":160,"MatchCriteriaID":529,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6DF4622A-CDCB-4247-B0C4-6256A3F1D032",{"Vulnerable":4,"Criteria":163,"MatchCriteriaID":531,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"31A03EBE-1A06-4D25-B534-A6B0A9446751",{"Vulnerable":4,"Criteria":166,"MatchCriteriaID":533,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7BF30373-5239-4D7D-8FDD-E48668CD7BF2",{"Vulnerable":4,"Criteria":169,"MatchCriteriaID":535,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9D7C353B-A4D8-44D2-AB6E-8830EA1A4BEC",{"Vulnerable":4,"Criteria":172,"MatchCriteriaID":537,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8F1CFFE2-56BE-4CD4-9791-3C8B0E3ABE1C",{"Vulnerable":4,"Criteria":175,"MatchCriteriaID":539,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":540,"VersionEndIncluding":27},"C54D621E-E274-47EA-95A4-123B82BD4DD9","12.2.0.1.14",{"Vulnerable":4,"Criteria":178,"MatchCriteriaID":542,"VersionStartExcluding":27,"VersionStartIncluding":543,"VersionEndExcluding":27,"VersionEndIncluding":544},"B8249A74-C34A-4F66-8F11-F7F50F8813BF","17.1","17.12",{"Vulnerable":4,"Criteria":181,"MatchCriteriaID":546,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D55A54FD-7DD1-49CD-BE81-0BE73990943C",{"Vulnerable":4,"Criteria":184,"MatchCriteriaID":548,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"82EB08C0-2D46-4635-88DF-E54F6452D3A3",{"Vulnerable":4,"Criteria":187,"MatchCriteriaID":550,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"202AD518-2E9B-4062-B063-9858AE1F9CE2",{"Vulnerable":4,"Criteria":191,"MatchCriteriaID":552,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6FD0EC40-B96B-4E9C-9A81-4E65C4B9512E",{"Vulnerable":4,"Criteria":195,"MatchCriteriaID":554,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D6A4F71A-4269-40FC-8F61-1D1301F2B728",[],[557,564],{"id":558,"eventType":559,"eventTime":560,"details":561,"label":562,"color":563},"14fe55dc-9383-41e6-b138-632e2a90a6b2","HIGH_EPSS_DELTA","2025-11-19T04:06:57.729352+00:00","Daily EPSS score increased by 0.140 on 2023-12-30","EPSS Score Increased","red",{"id":565,"eventType":566,"eventTime":567,"details":568,"label":569,"color":570},"f937032f-5577-4f3f-8477-d479d9f961c0","LOW_EPSS_DELTA","2025-11-22T04:06:46.162052+00:00","Daily EPSS score decreased by 0.140 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":572,"version":33},1792241170463,{"score":574,"band":575,"action":576,"scoredAt":577},67,"Medium","Plan remediation","2026-10-16T06:43:20.398432+00:00"]