Oracle Trace File Analyzer vulnerabilities

3 CVEs affecting Oracle Trace File Analyzer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-20330, published 2020-01-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-20330, published 2020-01-03. Critical severity, CVSS 9.8. EPSS: 8.6% chance of exploitation in the next 30 days. FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
CVE-2019-17531, published 2019-10-12. Critical severity, CVSS 9.8. EPSS: 5.4% chance of exploitation in the next 30 days. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed…
CVE-2019-16943, published 2019-10-01. Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed…