| Polymorphic Typing issue in FasterXML jackson-databindCVE-2019-14540 · GHSA-H822-R4R5-V8JG |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Insecure Deserialization in Apache Commons BeanutilsCVE-2019-10086 · GHSA-6PHF-73Q6-GH87 |
commons-beanutils:commons-beanutilsRed Hat AMQ Broker 7/commons-beanutils |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Improper Restriction of XML External Entity Reference in jackson-mapper-aslCVE-2019-10172 · GHSA-R6J9-8759-G62W |
org.codehaus.jackson:jackson-mapper-aslRed Hat BPM Suite 6/jackson-mapper-asl |
MavenRed Hat |
زیاد
|
اصلاح اعلام نشده |
|
| Polymorphic deserialization of malicious object in jackson-databindCVE-2019-14893 · GHSA-QMQC-X3R4-6V39 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of Untrusted DataCVE-2018-12023 · GHSA-6WQP-V4V6-C87C |
com.fasterxml.jackson.core:jackson-databindRed Hat JBoss A-MQ 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of Untrusted Data in jackson-databindCVE-2018-19361 · GHSA-MX9V-GMH4-MGQW |
com.fasterxml.jackson.core:jackson-databindRed Hat JBoss A-MQ 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| XML External Entity Reference (XXE) in jackson-databindCVE-2018-14720 · GHSA-X2W5-5M2G-7H5M |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219 · GHSA-M8P2-495H-CCMH |
org.hibernate.validator:hibernate-validatororg.hibernate:hibernate-validator |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper input validation in Apache ShiroCVE-2019-12422 · GHSA-R679-M633-G7WC |
org.apache.shiro:shiro-coreRed Hat JBoss A-MQ 6/shiro-core |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| SQL Injection in Hibernate ORMCVE-2019-14900 · GHSA-8GRG-Q944-CCH5 |
org.hibernate:hibernate-coreRed Hat BPM Suite 6/hibernate-core |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| jackson-databind polymorphic typing issueCVE-2019-16943 · GHSA-FMMC-742Q-JG75 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Improper Input Validation in jackson-databindCVE-2019-17267 · GHSA-F3J5-RMMP-3FC5 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Polymorphic Typing issue in FasterXML jackson-databindCVE-2019-16335 · GHSA-85CW-HJ65-QQV9 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in FasterXML jackson-databindCVE-2019-14379 · GHSA-6FPP-RGJ9-8RWC |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Information exposure in FasterXML jackson-databindCVE-2019-12086 · GHSA-5WW9-J83M-Q7QX |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Polymorphic Typing in FasterXML jackson-databindCVE-2019-16942 · GHSA-MX7P-6679-8G3Q |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Use of Externally-Controlled Input to Select Classes or Code in InfinispanCVE-2019-10174 · GHSA-H47X-2J37-FW5M |
org.infinispan:infinispan-coreRed Hat JBoss Data Virtualization 6/infinispan-core |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Polymorphic deserialization of malicious object in jackson-databindCVE-2019-14892 · GHSA-CF6R-3WGC-H863 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XML External Entity Reference in mchange:c3p0CVE-2018-20433 · GHSA-Q485-J897-QC27 |
com.mchange:c3p0Red Hat BPM Suite 6/c3p0 |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| XML External Entity Reference in Apache KarafCVE-2018-11788 · GHSA-92WJ-X78C-M4FX |
org.apache.karaf.specs:org.apache.karaf.specs.java.xmlRed Hat Fuse 7/karaf |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
