Oracle Global Lifecycle Management Opatchauto vulnerabilities
2 vulnerabilities
Known vulnerabilities in Oracle Global Lifecycle Management Opatchauto, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2017-7525fasterxml · jackson-databind +63 morefasterxml jackson-databindA deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.CVSS9.8CriticalEPSS37.72%PrioritiseCVE-2017-15095fasterxml · jackson-databind +68 morefasterxml jackson-databindA deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.CVSS9.8CriticalEPSS8.36%