client-4.4.0.jar: 55 vulnerabilities (highest severity is: 9.8) unreachable

<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - client-4.4.0.jar</summary>


Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar



Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a></details>

## Vulnerabilities

| Vulnerability | Severity | <img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> CVSS | Exploit Maturity | EPSS | Dependency | Type | Fixed in (client version) | Remediation Possible** | Reachability |
| ------------- | ------------- | ----- | ----- | ----- | ----- | ----- | ------------- | --- | --- |
| [CVE-2020-9548](https://www.mend.io/vulnerability-database/CVE-2020-9548) | <img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> Critical | 9.8 | Not Defined | 62.015% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-9547](https://www.mend.io/vulnerability-database/CVE-2020-9547) | <img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> Critical | 9.8 | Not Defined | 38.262% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-9546](https://www.mend.io/vulnerability-database/CVE-2020-9546) | <img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> Critical | 9.8 | Not Defined | 2.39% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-8840](https://www.mend.io/vulnerability-database/CVE-2020-8840) | <img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> Critical | 9.8 | Not Defined | 8.109% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2019-20330](https://www.mend.io/vulnerability-database/CVE-2019-20330) | <img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> Critical | 9.8 | Not Defined | 1.914% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2019-17267](https://www.mend.io/vulnerability-database/CVE-2019-17267) | <img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> Critical | 9.8 | Not Defined | 1.228% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2019-16943](https://www.mend.io/vulnerability-database/CVE-2019-16943) | <img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> Critical | 9.8 | Not Defined | 1.891% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2019-16942](https://www.mend.io/vulnerability-database/CVE-2019-16942) | <img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> Critical | 9.8 | Not Defined | 0.426% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2019-14540](https://www.mend.io/vulnerability-database/CVE-2019-14540) | <img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> Critical | 9.8 | Not Defined | 6.454% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-36184](https://www.mend.io/vulnerability-database/CVE-2020-36184) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.8 | Not Defined | 7.471% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-36182](https://www.mend.io/vulnerability-database/CVE-2020-36182) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.8 | Not Defined | 2.95% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-36181](https://www.mend.io/vulnerability-database/CVE-2020-36181) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.8 | Not Defined | 5.862% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-36180](https://www.mend.io/vulnerability-database/CVE-2020-36180) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.8 | Not Defined | 3.194% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-36179](https://www.mend.io/vulnerability-database/CVE-2020-36179) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.8 | Not Defined | 61.883% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-11113](https://www.mend.io/vulnerability-database/CVE-2020-11113) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.8 | Not Defined | 60.714% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-11112](https://www.mend.io/vulnerability-database/CVE-2020-11112) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.8 | Not Defined | 6.772% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-11111](https://www.mend.io/vulnerability-database/CVE-2020-11111) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.8 | Not Defined | 2.082% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-10969](https://www.mend.io/vulnerability-database/CVE-2020-10969) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.8 | Not Defined | 1.035% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-10968](https://www.mend.io/vulnerability-database/CVE-2020-10968) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.8 | Not Defined | 3.824% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-10673](https://www.mend.io/vulnerability-database/CVE-2020-10673) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.8 | Not Defined | 20.898% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-10672](https://www.mend.io/vulnerability-database/CVE-2020-10672) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.8 | Not Defined | 39.493% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2021-20190](https://www.mend.io/vulnerability-database/CVE-2021-20190) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 0.502% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-36189](https://www.mend.io/vulnerability-database/CVE-2020-36189) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 4.276% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-36188](https://www.mend.io/vulnerability-database/CVE-2020-36188) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 10.179% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-36187](https://www.mend.io/vulnerability-database/CVE-2020-36187) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 2.335% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-36186](https://www.mend.io/vulnerability-database/CVE-2020-36186) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 2.623% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-36185](https://www.mend.io/vulnerability-database/CVE-2020-36185) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 2.95% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-36183](https://www.mend.io/vulnerability-database/CVE-2020-36183) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 2.241% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-35728](https://www.mend.io/vulnerability-database/CVE-2020-35728) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 42.315% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-35491](https://www.mend.io/vulnerability-database/CVE-2020-35491) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 6.186% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-35490](https://www.mend.io/vulnerability-database/CVE-2020-35490) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 4.249% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-24750](https://www.mend.io/vulnerability-database/CVE-2020-24750) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 2.052% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-24616](https://www.mend.io/vulnerability-database/CVE-2020-24616) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 2.908% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-14195](https://www.mend.io/vulnerability-database/CVE-2020-14195) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 9.286% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-14062](https://www.mend.io/vulnerability-database/CVE-2020-14062) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 9.872% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-14061](https://www.mend.io/vulnerability-database/CVE-2020-14061) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 6.308% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-14060](https://www.mend.io/vulnerability-database/CVE-2020-14060) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 8.934% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-11620](https://www.mend.io/vulnerability-database/CVE-2020-11620) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 2.182% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-11619](https://www.mend.io/vulnerability-database/CVE-2020-11619) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 1.367% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-10650](https://www.mend.io/vulnerability-database/CVE-2020-10650) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 9.009% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2019-10202](https://www.mend.io/vulnerability-database/CVE-2019-10202) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 8.1 | Not Defined | 7.423% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [WS-2026-0003](https://github.com/advisories/GHSA-72hv-8253-57qq) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 7.5 | Not Defined | | jackson-core-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [WS-2022-0468](https://redirect.github.com/FasterXML/jackson-core/issues/861) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 7.5 | Not Defined | | jackson-core-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2025-52999](https://www.mend.io/vulnerability-database/CVE-2025-52999) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 7.5 | Not Defined | 0.252% | jackson-core-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2022-42004](https://www.mend.io/vulnerability-database/CVE-2022-42004) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 7.5 | Not Defined | 0.25% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2022-42003](https://www.mend.io/vulnerability-database/CVE-2022-42003) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 7.5 | Not Defined | 0.317% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-25649](https://www.mend.io/vulnerability-database/CVE-2020-25649) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 7.5 | Not Defined | 0.075% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2019-14893](https://www.mend.io/vulnerability-database/CVE-2019-14893) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 7.5 | Not Defined | 0.983% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2019-14892](https://www.mend.io/vulnerability-database/CVE-2019-14892) | <img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> High | 7.5 | Not Defined | 0.897% | jackson-databind-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [WS-2019-0379](https://github.com/apache/commons-codec/commit/48b615756d1d770091ea3322eefc08011ee8b113) | <img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20> Medium | 6.5 | Not Defined | | commons-codec-1.11.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2025-48924](https://www.mend.io/vulnerability-database/CVE-2025-48924) | <img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20> Medium | 5.3 | Not Defined | 0.095% | commons-lang3-3.8.1.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2020-13956](https://www.mend.io/vulnerability-database/CVE-2020-13956) | <img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20> Medium | 5.3 | Not Defined | 0.505% | httpclient-4.5.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2021-29425](https://www.mend.io/vulnerability-database/CVE-2021-29425) | <img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20> Medium | 4.8 | Not Defined | 0.485% | commons-io-2.5.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2024-47554](https://www.mend.io/vulnerability-database/CVE-2024-47554) | <img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20> Medium | 4.3 | Not Defined | 0.131% | commons-io-2.5.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
| [CVE-2025-49128](https://www.mend.io/vulnerability-database/CVE-2025-49128) | <img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20> Medium | 4.0 | Not Defined | 0.027% | jackson-core-2.9.8.jar | Transitive | N/A* | &#10060;|<img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> Unreachable |
*For some transitive vulnerabilities, there is no version of direct dependency with a fix. Check the "Details" section below to see if there is a version of transitive dependency where vulnerability is fixed.**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation

## Details


> Partial details (17 vulnerabilities) are displayed below due to a content size limitation in GitHub. To view information on the remaining vulnerabilities, navigate to the Mend Application. 

<details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2020-9548</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).

Publish Date: 2020-03-02
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2020-9548>CVE-2020-9548</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 62.015%




### CVSS 3 Score Details (9.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: None
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Origin: <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9548">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9548</a>
Release Date: 2020-03-02
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.7.9.7,2.8.11.6,2.9.10.4





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2020-9547</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).

Publish Date: 2020-03-02
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2020-9547>CVE-2020-9547</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 38.262%




### CVSS 3 Score Details (9.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: None
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Origin: <a href="https://osv.dev/vulnerability/GHSA-q93h-jc49-78gg">https://osv.dev/vulnerability/GHSA-q93h-jc49-78gg</a>
Release Date: 2020-03-02
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.7.9.7,2.8.11.6,2.9.10.4





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2020-9546</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).

Publish Date: 2020-03-02
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2020-9546>CVE-2020-9546</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 2.39%




### CVSS 3 Score Details (9.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: None
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Origin: <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9546">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9546</a>
Release Date: 2020-03-02
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.10.3





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2020-8840</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.

Publish Date: 2020-02-10
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2020-8840>CVE-2020-8840</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 8.109%




### CVSS 3 Score Details (9.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: None
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Release Date: 2020-02-10
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.9.10.3





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2019-20330</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.

Publish Date: 2020-01-03
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2019-20330>CVE-2019-20330</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 1.914%




### CVSS 3 Score Details (9.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: None
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Release Date: 2020-01-03
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.7.9.7,2.8.11.5,2.9.10.2





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2019-17267</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.

Publish Date: 2019-10-06
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2019-17267>CVE-2019-17267</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 1.228%




### CVSS 3 Score Details (9.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: None
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Release Date: 2019-10-06
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.8.11.5,2.9.10





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2019-16943</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.

Publish Date: 2019-10-01
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2019-16943>CVE-2019-16943</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 1.891%




### CVSS 3 Score Details (9.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: None
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Origin: <a href="https://osv.dev/vulnerability/GHSA-fmmc-742q-jg75">https://osv.dev/vulnerability/GHSA-fmmc-742q-jg75</a>
Release Date: 2019-10-01
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.6.7.3,2.8.11.5,2.9.10.1





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2019-16942</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.

Publish Date: 2019-10-01
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2019-16942>CVE-2019-16942</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 0.426%




### CVSS 3 Score Details (9.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: None
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Origin: <a href="https://osv.dev/vulnerability/GHSA-mx7p-6679-8g3q">https://osv.dev/vulnerability/GHSA-mx7p-6679-8g3q</a>
Release Date: 2019-10-01
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.6.7.3,2.8.11.5,2.9.10.1





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/critical_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2019-14540</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

Publish Date: 2019-09-15
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2019-14540>CVE-2019-14540</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 6.454%




### CVSS 3 Score Details (9.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: None
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Origin: <a href="https://osv.dev/vulnerability/GHSA-h822-r4r5-v8jg">https://osv.dev/vulnerability/GHSA-h822-r4r5-v8jg</a>
Release Date: 2019-09-15
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.6.7.3,2.8.11.5,2.9.10





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2020-36184</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.

Publish Date: 2021-01-06
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2020-36184>CVE-2020-36184</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 7.471%




### CVSS 3 Score Details (8.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: Required
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Release Date: 2021-01-06
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.9.10.8





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2020-36182</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.

Publish Date: 2021-01-06
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2020-36182>CVE-2020-36182</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 2.95%




### CVSS 3 Score Details (8.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: Required
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Release Date: 2021-01-06
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.9.10.8





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2020-36181</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.

Publish Date: 2021-01-06
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2020-36181>CVE-2020-36181</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 5.862%




### CVSS 3 Score Details (8.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: Required
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Release Date: 2021-01-06
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.9.10.8





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2020-36180</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.

Publish Date: 2021-01-06
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2020-36180>CVE-2020-36180</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 3.194%




### CVSS 3 Score Details (8.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: Required
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Release Date: 2021-01-06
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.9.10.8





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2020-36179</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.

Publish Date: 2021-01-06
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2020-36179>CVE-2020-36179</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 61.883%




### CVSS 3 Score Details (8.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: Required
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Release Date: 2021-01-06
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.9.10.8





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2020-11113</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).

Publish Date: 2020-03-31
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2020-11113>CVE-2020-11113</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 60.714%




### CVSS 3 Score Details (8.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: Required
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Origin: <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11113">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11113</a>
Release Date: 2020-03-31
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.9.10.4;2.10.0





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2020-11112</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).

Publish Date: 2020-03-31
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2020-11112>CVE-2020-11112</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 6.772%




### CVSS 3 Score Details (8.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: Required
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Origin: <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11112">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11112</a>
Release Date: 2020-03-31
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.9.10.4,2.10.0





</details><details>

<summary><img src='https://whitesource-resources.whitesourcesoftware.com/high_vul.png?' width=19 height=20> <img src='https://whitesource-resources.whitesourcesoftware.com/viaGreen.png' width=19 height=20> CVE-2020-11111</summary>


### Vulnerable Library - jackson-databind-2.9.8.jar

General data-binding functionality for Jackson: works on core streaming API
Library home page: <a href="http://fasterxml.com/">http://fasterxml.com/</a>
Path to dependency file: /nexmo-spring-boot-autoconfigure/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar


Dependency Hierarchy:
 - client-4.4.0.jar (Root Library)
 - :x: **jackson-databind-2.9.8.jar** (Vulnerable Library)
Found in HEAD commit: <a href="https://github.com/Nexmo/nexmo-spring-boot-starter/commit/3c697156679612e93e2a8f1c4982c052a930d7d1">3c697156679612e93e2a8f1c4982c052a930d7d1</a>
Found in base branch: main




### Reachability Analysis
The vulnerable code is unreachable






### Vulnerability Details
 
 
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms).

Publish Date: 2020-03-31
URL: <a href=https://www.mend.io/vulnerability-database/CVE-2020-11111>CVE-2020-11111</a>




### Threat Assessment
 

Exploit Maturity: Not Defined
EPSS: 2.082%




### CVSS 3 Score Details (8.8)


Base Score Metrics:
- Exploitability Metrics:
 - Attack Vector: Network
 - Attack Complexity: Low
 - Privileges Required: None
 - User Interaction: Required
 - Scope: Unchanged
- Impact Metrics:
 - Confidentiality Impact: High
 - Integrity Impact: High
 - Availability Impact: High

For more information on CVSS3 Scores, click <a href="https://www.first.org/cvss/calculator/3.0">here</a>.




### Suggested Fix


Type: Upgrade version
Origin: <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11113">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11113</a>
Release Date: 2020-03-31
Fix Resolution: com.fasterxml.jackson.core:jackson-databind:2.9.10.4,2.10.0





</details>

Vulnerability	Severity	CVSS	Exploit Maturity	EPSS	Dependency	Type	Fixed in (client version)	Remediation Possible**	Reachability
CVE-2020-9548	Critical	9.8	Not Defined	62.015%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-9547	Critical	9.8	Not Defined	38.262%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-9546	Critical	9.8	Not Defined	2.39%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-8840	Critical	9.8	Not Defined	8.109%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2019-20330	Critical	9.8	Not Defined	1.914%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2019-17267	Critical	9.8	Not Defined	1.228%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2019-16943	Critical	9.8	Not Defined	1.891%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2019-16942	Critical	9.8	Not Defined	0.426%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2019-14540	Critical	9.8	Not Defined	6.454%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-36184	High	8.8	Not Defined	7.471%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-36182	High	8.8	Not Defined	2.95%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-36181	High	8.8	Not Defined	5.862%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-36180	High	8.8	Not Defined	3.194%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-36179	High	8.8	Not Defined	61.883%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-11113	High	8.8	Not Defined	60.714%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-11112	High	8.8	Not Defined	6.772%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-11111	High	8.8	Not Defined	2.082%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-10969	High	8.8	Not Defined	1.035%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-10968	High	8.8	Not Defined	3.824%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-10673	High	8.8	Not Defined	20.898%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-10672	High	8.8	Not Defined	39.493%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2021-20190	High	8.1	Not Defined	0.502%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-36189	High	8.1	Not Defined	4.276%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-36188	High	8.1	Not Defined	10.179%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-36187	High	8.1	Not Defined	2.335%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-36186	High	8.1	Not Defined	2.623%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-36185	High	8.1	Not Defined	2.95%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-36183	High	8.1	Not Defined	2.241%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-35728	High	8.1	Not Defined	42.315%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-35491	High	8.1	Not Defined	6.186%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-35490	High	8.1	Not Defined	4.249%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-24750	High	8.1	Not Defined	2.052%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-24616	High	8.1	Not Defined	2.908%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-14195	High	8.1	Not Defined	9.286%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-14062	High	8.1	Not Defined	9.872%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-14061	High	8.1	Not Defined	6.308%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-14060	High	8.1	Not Defined	8.934%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-11620	High	8.1	Not Defined	2.182%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-11619	High	8.1	Not Defined	1.367%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-10650	High	8.1	Not Defined	9.009%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2019-10202	High	8.1	Not Defined	7.423%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
WS-2026-0003	High	7.5	Not Defined		jackson-core-2.9.8.jar	Transitive	N/A*	❌	Unreachable
WS-2022-0468	High	7.5	Not Defined		jackson-core-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2025-52999	High	7.5	Not Defined	0.252%	jackson-core-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2022-42004	High	7.5	Not Defined	0.25%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2022-42003	High	7.5	Not Defined	0.317%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-25649	High	7.5	Not Defined	0.075%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2019-14893	High	7.5	Not Defined	0.983%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2019-14892	High	7.5	Not Defined	0.897%	jackson-databind-2.9.8.jar	Transitive	N/A*	❌	Unreachable
WS-2019-0379	Medium	6.5	Not Defined		commons-codec-1.11.jar	Transitive	N/A*	❌	Unreachable
CVE-2025-48924	Medium	5.3	Not Defined	0.095%	commons-lang3-3.8.1.jar	Transitive	N/A*	❌	Unreachable
CVE-2020-13956	Medium	5.3	Not Defined	0.505%	httpclient-4.5.8.jar	Transitive	N/A*	❌	Unreachable
CVE-2021-29425	Medium	4.8	Not Defined	0.485%	commons-io-2.5.jar	Transitive	N/A*	❌	Unreachable
CVE-2024-47554	Medium	4.3	Not Defined	0.131%	commons-io-2.5.jar	Transitive	N/A*	❌	Unreachable
CVE-2025-49128	Medium	4.0	Not Defined	0.027%	jackson-core-2.9.8.jar	Transitive	N/A*	❌	Unreachable

client-4.4.0.jar: 55 vulnerabilities (highest severity is: 9.8) unreachable #34

Description

Vulnerabilities

Details

Vulnerable Library - jackson-databind-2.9.8.jar

Reachability Analysis

Vulnerability Details

Threat Assessment

CVSS 3 Score Details (9.8)

Suggested Fix

Vulnerable Library - jackson-databind-2.9.8.jar

Reachability Analysis

Vulnerability Details

Threat Assessment

CVSS 3 Score Details (9.8)

Suggested Fix

Vulnerable Library - jackson-databind-2.9.8.jar

Reachability Analysis

Vulnerability Details

Threat Assessment

CVSS 3 Score Details (9.8)

Suggested Fix

Vulnerable Library - jackson-databind-2.9.8.jar

Reachability Analysis

Vulnerability Details

Threat Assessment

CVSS 3 Score Details (9.8)

Suggested Fix

Vulnerable Library - jackson-databind-2.9.8.jar

Reachability Analysis

Vulnerability Details

Threat Assessment

CVSS 3 Score Details (9.8)

Suggested Fix

Vulnerable Library - jackson-databind-2.9.8.jar

Reachability Analysis

Vulnerability Details

Threat Assessment

CVSS 3 Score Details (9.8)

Suggested Fix

Vulnerable Library - jackson-databind-2.9.8.jar

Reachability Analysis

Vulnerability Details

Threat Assessment

CVSS 3 Score Details (9.8)

Suggested Fix

Vulnerable Library - jackson-databind-2.9.8.jar

Reachability Analysis

Vulnerability Details

Threat Assessment

CVSS 3 Score Details (9.8)

Suggested Fix

Vulnerable Library - jackson-databind-2.9.8.jar

Reachability Analysis

Vulnerability Details

Threat Assessment

CVSS 3 Score Details (9.8)

Suggested Fix

Vulnerable Library - jackson-databind-2.9.8.jar

Reachability Analysis

Vulnerability Details

Threat Assessment

CVSS 3 Score Details (8.8)

Suggested Fix

Vulnerable Library - jackson-databind-2.9.8.jar

Reachability Analysis

Vulnerability Details

Threat Assessment

CVSS 3 Score Details (8.8)

Suggested Fix

Vulnerable Library - jackson-databind-2.9.8.jar

Reachability Analysis

Vulnerability Details

Threat Assessment

CVSS 3 Score Details (8.8)

Suggested Fix

Vulnerable Library - jackson-databind-2.9.8.jar

Reachability Analysis

Vulnerability Details

Threat Assessment