Description
XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.
References (1)
Core 1
Core References
Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184561.html
Scores
CVSS v3
9.8
EPSS
0.0278
EPSS Percentile
84.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (3)
com.fasterxml.jackson.dataformat/jackson-dataformat-xml
0 - 2.7.4Maven
fasterxml/jackson-dataformat-xml
< 2.7.3
fedoraproject/fedora
24
Published
Jun 10, 2016
Tracked Since
Feb 18, 2026