Fasterxml Jackson-Dataformat-Xml
2 CVEs affecting Fasterxml Jackson-Dataformat-Xml. Latest disclosed: 2017-04-14. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-3720 | Critical | 9.8 | 2016-06-10 | XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified… |
CVE-2016-7051 | High | 8.6 | 2017-04-14 | XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-si… |