VDB

BDU%3A2024-00113

BDU%3A2024-00113 PUBLISHED CVSS 7.599999904632568 HIGH

Уязвимость библиотеки jackson-databind, связанная с восстановлением в памяти недостоверных данных, позволяющая нарушителю выполнить произвольный код

Risk Scores

CVSS 2.0
7.599999904632568

Affected Products

VendorProductVersions
Oracle Corp., Сообщество свободного программного обеспечения, Red Hat Inc., NetApp Inc., АО "НППКТ", АО «НТЦ ИТ РОСА»Application Testing Suite, Debian GNU/Linux, Red Hat OpenStack Platform, Red Hat JBoss Data Virtualization, Red Hat BPM Suite, Oracle Agile PLM, Red Hat JBoss Data Grid, Insurance Policy Administration J2EE, Oracle Communications Evolved Communications Application Server, Oracle Retail Merchandising System, Oracle SD-WAN Edge, Oracle Communications Services Gatekeeper, Oracle Banking Platform, Oracle Retail Xstore Point of Service, Oracle Banking Virtual Account Management, Red Hat JBoss BRMS, Red Hat JBoss Fuse Service Works, Oracle WebCenter Portal, Communications Diameter Signaling Router, OpenShift Logging, Red Hat OpenShift Container Platform, Service Level Manager (SLM), Autovue for Agile Product Lifecycle Management, Banking Treasury Management, Communications Cloud Native Core Policy, Communications Instant Messaging Server, Communications Pricing Design Center, Communications Unified Inventory Management, Oracle Documaker, Oracle Communications Cloud Native Core Unified Data Repository, Oracle Communications Offline Mediation Controller, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), ROSA Virtualization (запись в едином реестре российских программ №5091), РОСА ХРОМ (запись в едином реестре российских программ №1607), Oracle Retail Customer Management and Segmentation Foundation, NetApp Cloud Backup (formerly AltaVault), Element Plug-in for vCenter Server, Blockchain Platform

Timeline

  • Jan 10, 2024 CVE Published
  • Mar 5, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›