VDB
BDU%3A2022-01228
BDU%3A2022-01228
PUBLISHED
CVSS 9.399999618530273 CRITICAL
Уязвимость библиотек json-smart-v1 и json-smart-v2, связанная с недостаточной проверкой необычных или исключительных состояний, позволяющая нарушителю вызвать аварийное завершение работы приложения или раскрыть защищаемую информацию
Risk Scores
CVSS 2.0
9.399999618530273
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., IBM Corp., Netplexity | WebLogic Server, Utilities Framework, PeopleSoft Enterprise PeopleTools, Spectrum Symphony, json-smart-v1, json-smart-v2, Oracle Communications Cloud Native Core Policy, OSS Support Tools, IBM Security Access Manager |
Timeline
- Mar 11, 2022 CVE Published
- Sep 8, 2022 CVE Updated
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-27568 url
- https://www.oracle.com/security-alerts/cpujan2022.html url
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-apache-json-small-and-fast-parser-json-smart-and-underscore-affect-ibm-spectrum-symphony/ advisory
- https://www.ibm.com/support/pages/node/6502211 advisory
- https://www.oracle.com//security-alerts/cpujul2021.html advisory