fasterxml jackson-databind CVE-2018-11307 vulnerability in FasterXML and Other Products
Published on July 9, 2019

product logo product logo product logo
An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2018-11307

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-11307 are published in these products:

FasterXML Jackson Databind
 
Oracle Clusterware
 
Oracle Communications Instant Messaging Server
 
Oracle Retail Customer Management Segmentation Foundation
 
Oracle Utilities Advanced Spatial Operational Analytics
 
Red Hat Openshift Container Platform
 
Oracle Global Lifecycle Management Opatch
 

Exploit Probability

EPSS
12.64%
Percentile
93.82%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.