Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 1 min 173 bronnen 2 kritiek 38 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2018-14721

CRITICAL · 10.0 CVSS Gepubliceerd: CWE-918

Beschrijving

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.

Vendors

Fasterxml Debian Oracle Redhat

Affected products

Jackson-databind Debian Linux Banking Platform Communications Billing And Revenue Management Enterprise Manager For Virtualization Financial Services Analytical Applications Infrastructure Jdeveloper Primavera Unifier Retail Merchandising System Webcenter Portal Jboss Enterprise Application Platform Openshift Container Platform

References