CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. It affects Apache, Oracle, Java. Public exploit code or proof-of-concept references have been detected in its references. Its EPSS score suggests a 12.5% probability of exploitation in the next 30 days.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).
Related CVEs
Other vulnerabilities affecting the same vendor(s)