Search for packages
| purl | pkg:rpm/redhat/rh-maven35-jackson-databind@2.7.6-2.4?arch=el7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-bc2x-rwrd-tya6
Aliases: CVE-2017-17485 GHSA-rfx6-vp9g-rh7v |
FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath. | There are no reported fixed by versions. |
|
VCID-ceub-d4s9-dkcd
Aliases: CVE-2017-15095 GHSA-h592-38cm-4ggp |
Deserialization of Untrusted Data A deserialization flaw was discovered in the jackson-databind which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the `readValue` method of the `ObjectMapper`. | There are no reported fixed by versions. |
|
VCID-v84e-sf92-dqa1
Aliases: CVE-2017-7525 GHSA-qxxx-2pp7-5hmx |
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:29:51.196439+00:00 | RedHat Importer | Affected by | VCID-v84e-sf92-dqa1 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7525.json | 38.0.0 |
| 2026-04-01T14:27:10.719026+00:00 | RedHat Importer | Affected by | VCID-ceub-d4s9-dkcd | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15095.json | 38.0.0 |
| 2026-04-01T14:26:52.112860+00:00 | RedHat Importer | Affected by | VCID-bc2x-rwrd-tya6 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17485.json | 38.0.0 |