Jackson-dataformat-xml (Fasterxml) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 90 known versions, newest CVE from 2017-04-14. Vendor: Fasterxml.

CVEs of Jackson-dataformat-xml

• CVE-2016-7051 - CVSS 8.6 (high), 2017-04-14: XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct…
• CVE-2016-3720 - CVSS 9.8 (critical), 2016-06-10: XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have…