Fasterxml Jackson Dataformat Xml vulnerabilities

2 vulnerabilities

Known vulnerabilities in Fasterxml Jackson Dataformat Xml, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.6CVE-2016-7051debianjackson-dataformat-xml+3
EPSS score
2.36%
XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery (SSRF) attacks via vectors related to a DTD.9.8CVE-2016-3720debianjackson-dataformat-xml+5
EPSS score
2.78%
XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.