CVE Intelligence

Red Hat Jboss Bpm Suite vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Red Hat Jboss Bpm Suite: 3 record(s), with affected versions and fixes.
cpe:2.3:a:redhat:jboss_bpm_suite

CVE-2018-19362 Critical · 9.8 CWE-502 Jan 2, 2019
com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.
CVE-2018-19361 Critical · 9.8 CWE-502 Jan 2, 2019
Deserialization of Untrusted Data in jackson-databind
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.
CVE-2018-19360 Critical · 9.8 CWE-502 Jan 2, 2019
Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.