Oracle

Primavera Unifier

95 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2020-11619

  • EPSS 1.73%
  • Published 07.04.2020 23:15:12
  • Last modified 21.11.2024 04:58:15

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).

8.8

CVE-2020-11113

  • EPSS 60.71%
  • Published 31.03.2020 05:15:13
  • Last modified 21.11.2024 04:56:49

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).

8.8

CVE-2020-11112

  • EPSS 11.42%
  • Published 31.03.2020 05:15:13
  • Last modified 21.11.2024 04:56:49

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).

8.8

CVE-2020-11111

  • EPSS 2.2%
  • Published 31.03.2020 05:15:13
  • Last modified 21.11.2024 04:56:48

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms).

8.8

CVE-2020-10969

  • EPSS 1.4%
  • Published 26.03.2020 13:15:13
  • Last modified 21.11.2024 04:56:28

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.

8.8

CVE-2020-10968

  • EPSS 6.63%
  • Published 26.03.2020 13:15:12
  • Last modified 21.11.2024 04:56:28

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).

8.8

CVE-2020-10673

  • EPSS 20.47%
  • Published 18.03.2020 22:15:12
  • Last modified 21.11.2024 04:55:49

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).

8.8

CVE-2020-10672

  • EPSS 40.07%
  • Published 18.03.2020 22:15:12
  • Last modified 21.11.2024 04:55:49

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).

5

CVE-2020-5258

Exploit
  • EPSS 1.99%
  • Published 10.03.2020 18:15:12
  • Last modified 21.11.2024 05:33:46

In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker ...

9.8

CVE-2020-9548

  • EPSS 70.37%
  • Published 02.03.2020 04:15:11
  • Last modified 21.11.2024 05:40:50

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).