A remote, unauthenticated attacker can exploit a vulnerability in the FasterXML Jackson library to cause a Denial of Service, with a CVSS base score of 7.5 (High). The core library vulnerability affects versions prior to 2.15.0, and the advisory lists numerous affected downstream products including specific versions of Splunk Enterprise, Red Hat Single Sign-On, Red Hat Enterprise Linux, and IBM Business Automation Workflow. Mitigations are available, requiring administrators to consult the detailed product-specific update paths provided in the advisory.
[WID-SEC-2025-1405] FasterXML Jackson: Schwachstelle ermöglicht Denial of Service CVSS Base Score 7.5 (hoch) CVSS Temporal Score 6.7 (mittel) Remoteangriff ja Datum 25.06.2025 Stand UPDATE 04.03.2026 Mitigation ja Betroffene Systeme Betriebssystem Linux Sonstiges UNIX Windows Produktbeschreibung Jackson ist eine quelloffene Bibliothek zur JSON-Verarbeitung in Java. Produkte UPDATE 18.01.2026 Dell ECS <4.2.0.0 UPDATE 12.11.2025 Splunk Splunk Enterprise <9.4.5 Splunk Splunk Enterprise <9.3.7 Splunk Splunk Enterprise <9.2.9 UPDATE 05.11.2025 IBM Business Automation Workflow UPDATE 01.10.2025 Splunk Splunk Enterprise <10.0.1 Splunk Splunk Enterprise <9.4.4 Splunk Splunk Enterprise <9.3.6 Splunk Splunk Enterprise <9.2.8 UPDATE 11.09.2025 Red Hat Single Sign On <7.6.12 UPDATE 08.09.2025 RESF Rocky Linux UPDATE 31.07.2025 Oracle Linux UPDATE 30.07.2025 Amazon Linux 2 UPDATE 21.07.2025 Red Hat Enterprise Linux UPDATE 01.07.2025 Red Hat OpenShift Developer Tools and Services 4.14 Red Hat OpenShift Developer Tools and Services 4.16 Red Hat OpenShift Developer Tools and Services 4.17 Red Hat OpenShift Developer Tools and Services 4.18 Red Hat OpenShift Developer Tools and Services 4.15 Red Hat OpenShift Developer Tools and Services 4.13 Red Hat OpenShift Developer Tools and Services 4.12 25.06.2025 FasterXML Jackson <2.15.0 Angriff Angriff Ein entfernter, anonymer Angreifer kann eine Schwachstelle in FasterXML Jackson ausnutzen, um einen Denial of Service Angriff durchzuführen. CVE Informationen Versionshistorie Feedback zum Advisory geben