VDB

BDU%3A2022-05602

BDU%3A2022-05602 PUBLISHED CVSS 7.800000190734863 HIGH

Уязвимость компонента DOMDeserializer библиотеки FasterXML jackson-databind, позволяющая нарушителю проводить XXE-атаки

Risk Scores

CVSS 2.0
7.800000190734863

Affected Products

VendorProductVersions
Oracle Corp., Fedora Project, ООО «Ред Софт», IBM Corp., FasterXML, LLC, Apache Software Foundation, АО "НППКТ", АО «НТЦ ИТ РОСА», АО «Концерн ВНИИНС»Oracle Communications Messaging Server, Application Testing Suite, Primavera Unifier, Oracle Coherence, Banking Platform, Fedora, Oracle Agile PLM, Oracle Insurance Rules Palette, Oracle Communications Evolved Communications Application Server, Communications Billing and Revenue Management, Oracle SD-WAN Edge, Oracle Communications Services Gatekeeper, Oracle GoldenGate Application Adapters, Oracle Health Sciences Empirica Signal, JD Edwards EnterpriseOne Tools, Oracle Retail Xstore Point of Service, Oracle Communications Unified Inventory Management, Oracle WebCenter Portal, Communications Diameter Signaling Router, Primavera Gateway, РЕД ОС (запись в едином реестре российских программ №3751), Oracle Utilities Framework, Oracle Banking APIs, Blockchain Platform, Commerce, Banking Treasury Management, Banking Virtual Account Management, Communications Instant Messaging Server, Communications Interactive Session Recorder, Communications Pricing Design Center, IBM Security Access Manager, Jackson-databind, IoTDB, Communications Convergent Charging Controller, Communications Network Charging and Control, Oracle Communications Cloud Native Core Unified Data Repository, Insurance Policy Administration, JD Edwards EnterpriseOne Orchestrator, Oracle Retail Service Backbone, Oracle Communications Offline Mediation Controller, Agile Product Lifecycle Management Integration Pack for Oracle E-Business Suite, Oracle Banking Extensibility Workbench, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), РОСА ХРОМ (запись в едином реестре российских программ №1607), ОС ОН «Стрелец» (запись в едином реестре российских программ №6177)

Timeline

  • Sep 8, 2022 CVE Published
  • Feb 8, 2024 PoC Published
  • Jun 18, 2025 CVE Updated

References

…and 56 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›