CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25845

The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote servers. Workaround: If upgrading is not possible, you can enable [safeMode](https://github.com/alibaba/fastjson/wiki/fastjson_safemode).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.899

EPSS Ranking 99.6%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 6.8

References

Products affected by CVE-2022-25845

Alibaba » Fastjson » Version: N/A

cpe:2.3:a:alibaba:fastjson:-
Alibaba » Fastjson » Version: 1.1.157

cpe:2.3:a:alibaba:fastjson:1.1.157
Alibaba » Fastjson » Version: 1.1.20

cpe:2.3:a:alibaba:fastjson:1.1.20
Alibaba » Fastjson » Version: 1.1.21

cpe:2.3:a:alibaba:fastjson:1.1.21
Alibaba » Fastjson » Version: 1.1.22

cpe:2.3:a:alibaba:fastjson:1.1.22
Alibaba » Fastjson » Version: 1.1.23

cpe:2.3:a:alibaba:fastjson:1.1.23
Alibaba » Fastjson » Version: 1.1.25

cpe:2.3:a:alibaba:fastjson:1.1.25
Alibaba » Fastjson » Version: 1.1.26

cpe:2.3:a:alibaba:fastjson:1.1.26
Alibaba » Fastjson » Version: 1.1.27

cpe:2.3:a:alibaba:fastjson:1.1.27
Alibaba » Fastjson » Version: 1.1.31

cpe:2.3:a:alibaba:fastjson:1.1.31
Alibaba » Fastjson » Version: 1.1.32

cpe:2.3:a:alibaba:fastjson:1.1.32
Alibaba » Fastjson » Version: 1.1.33

cpe:2.3:a:alibaba:fastjson:1.1.33
Alibaba » Fastjson » Version: 1.1.34

cpe:2.3:a:alibaba:fastjson:1.1.34
Alibaba » Fastjson » Version: 1.1.35

cpe:2.3:a:alibaba:fastjson:1.1.35
Alibaba » Fastjson » Version: 1.1.36

cpe:2.3:a:alibaba:fastjson:1.1.36
Alibaba » Fastjson » Version: 1.1.42

cpe:2.3:a:alibaba:fastjson:1.1.42
Alibaba » Fastjson » Version: 1.1.43

cpe:2.3:a:alibaba:fastjson:1.1.43
Alibaba » Fastjson » Version: 1.1.44

cpe:2.3:a:alibaba:fastjson:1.1.44
Alibaba » Fastjson » Version: 1.1.45

cpe:2.3:a:alibaba:fastjson:1.1.45
Alibaba » Fastjson » Version: 1.1.46

cpe:2.3:a:alibaba:fastjson:1.1.46
Alibaba » Fastjson » Version: 1.2.0

cpe:2.3:a:alibaba:fastjson:1.2.0
Alibaba » Fastjson » Version: 1.2.1

cpe:2.3:a:alibaba:fastjson:1.2.1
Alibaba » Fastjson » Version: 1.2.10

cpe:2.3:a:alibaba:fastjson:1.2.10
Alibaba » Fastjson » Version: 1.2.12

cpe:2.3:a:alibaba:fastjson:1.2.12
Alibaba » Fastjson » Version: 1.2.13

cpe:2.3:a:alibaba:fastjson:1.2.13
Alibaba » Fastjson » Version: 1.2.14

cpe:2.3:a:alibaba:fastjson:1.2.14
Alibaba » Fastjson » Version: 1.2.15

cpe:2.3:a:alibaba:fastjson:1.2.15
Alibaba » Fastjson » Version: 1.2.16

cpe:2.3:a:alibaba:fastjson:1.2.16
Alibaba » Fastjson » Version: 1.2.17

cpe:2.3:a:alibaba:fastjson:1.2.17
Alibaba » Fastjson » Version: 1.2.18

cpe:2.3:a:alibaba:fastjson:1.2.18
Alibaba » Fastjson » Version: 1.2.19

cpe:2.3:a:alibaba:fastjson:1.2.19
Alibaba » Fastjson » Version: 1.2.2

cpe:2.3:a:alibaba:fastjson:1.2.2
Alibaba » Fastjson » Version: 1.2.20

cpe:2.3:a:alibaba:fastjson:1.2.20
Alibaba » Fastjson » Version: 1.2.21

cpe:2.3:a:alibaba:fastjson:1.2.21
Alibaba » Fastjson » Version: 1.2.22

cpe:2.3:a:alibaba:fastjson:1.2.22
Alibaba » Fastjson » Version: 1.2.23

cpe:2.3:a:alibaba:fastjson:1.2.23
Alibaba » Fastjson » Version: 1.2.24

cpe:2.3:a:alibaba:fastjson:1.2.24
Alibaba » Fastjson » Version: 1.2.25

cpe:2.3:a:alibaba:fastjson:1.2.25
Alibaba » Fastjson » Version: 1.2.26

cpe:2.3:a:alibaba:fastjson:1.2.26
Alibaba » Fastjson » Version: 1.2.27

cpe:2.3:a:alibaba:fastjson:1.2.27
Alibaba » Fastjson » Version: 1.2.28

cpe:2.3:a:alibaba:fastjson:1.2.28
Alibaba » Fastjson » Version: 1.2.29

cpe:2.3:a:alibaba:fastjson:1.2.29
Alibaba » Fastjson » Version: 1.2.30

cpe:2.3:a:alibaba:fastjson:1.2.30
Alibaba » Fastjson » Version: 1.2.31

cpe:2.3:a:alibaba:fastjson:1.2.31
Alibaba » Fastjson » Version: 1.2.32

cpe:2.3:a:alibaba:fastjson:1.2.32
Alibaba » Fastjson » Version: 1.2.33

cpe:2.3:a:alibaba:fastjson:1.2.33
Alibaba » Fastjson » Version: 1.2.34

cpe:2.3:a:alibaba:fastjson:1.2.34
Alibaba » Fastjson » Version: 1.2.35

cpe:2.3:a:alibaba:fastjson:1.2.35
Alibaba » Fastjson » Version: 1.2.36

cpe:2.3:a:alibaba:fastjson:1.2.36
Alibaba » Fastjson » Version: 1.2.37

cpe:2.3:a:alibaba:fastjson:1.2.37
Alibaba » Fastjson » Version: 1.2.38

cpe:2.3:a:alibaba:fastjson:1.2.38
Alibaba » Fastjson » Version: 1.2.39

cpe:2.3:a:alibaba:fastjson:1.2.39
Alibaba » Fastjson » Version: 1.2.4

cpe:2.3:a:alibaba:fastjson:1.2.4
Alibaba » Fastjson » Version: 1.2.40

cpe:2.3:a:alibaba:fastjson:1.2.40
Alibaba » Fastjson » Version: 1.2.41

cpe:2.3:a:alibaba:fastjson:1.2.41
Alibaba » Fastjson » Version: 1.2.42

cpe:2.3:a:alibaba:fastjson:1.2.42
Alibaba » Fastjson » Version: 1.2.43

cpe:2.3:a:alibaba:fastjson:1.2.43
Alibaba » Fastjson » Version: 1.2.44

cpe:2.3:a:alibaba:fastjson:1.2.44
Alibaba » Fastjson » Version: 1.2.45

cpe:2.3:a:alibaba:fastjson:1.2.45
Alibaba » Fastjson » Version: 1.2.46

cpe:2.3:a:alibaba:fastjson:1.2.46
Alibaba » Fastjson » Version: 1.2.47

cpe:2.3:a:alibaba:fastjson:1.2.47
Alibaba » Fastjson » Version: 1.2.48

cpe:2.3:a:alibaba:fastjson:1.2.48
Alibaba » Fastjson » Version: 1.2.49

cpe:2.3:a:alibaba:fastjson:1.2.49
Alibaba » Fastjson » Version: 1.2.50

cpe:2.3:a:alibaba:fastjson:1.2.50
Alibaba » Fastjson » Version: 1.2.51

cpe:2.3:a:alibaba:fastjson:1.2.51
Alibaba » Fastjson » Version: 1.2.52

cpe:2.3:a:alibaba:fastjson:1.2.52
Alibaba » Fastjson » Version: 1.2.54

cpe:2.3:a:alibaba:fastjson:1.2.54
Alibaba » Fastjson » Version: 1.2.55

cpe:2.3:a:alibaba:fastjson:1.2.55
Alibaba » Fastjson » Version: 1.2.56

cpe:2.3:a:alibaba:fastjson:1.2.56
Alibaba » Fastjson » Version: 1.2.57

cpe:2.3:a:alibaba:fastjson:1.2.57
Alibaba » Fastjson » Version: 1.2.58

cpe:2.3:a:alibaba:fastjson:1.2.58
Alibaba » Fastjson » Version: 1.2.59

cpe:2.3:a:alibaba:fastjson:1.2.59
Alibaba » Fastjson » Version: 1.2.6

cpe:2.3:a:alibaba:fastjson:1.2.6
Alibaba » Fastjson » Version: 1.2.60

cpe:2.3:a:alibaba:fastjson:1.2.60
Alibaba » Fastjson » Version: 1.2.61

cpe:2.3:a:alibaba:fastjson:1.2.61
Alibaba » Fastjson » Version: 1.2.62

cpe:2.3:a:alibaba:fastjson:1.2.62
Alibaba » Fastjson » Version: 1.2.63

cpe:2.3:a:alibaba:fastjson:1.2.63
Alibaba » Fastjson » Version: 1.2.66

cpe:2.3:a:alibaba:fastjson:1.2.66
Alibaba » Fastjson » Version: 1.2.67

cpe:2.3:a:alibaba:fastjson:1.2.67
Alibaba » Fastjson » Version: 1.2.68

cpe:2.3:a:alibaba:fastjson:1.2.68
Alibaba » Fastjson » Version: 1.2.69

cpe:2.3:a:alibaba:fastjson:1.2.69
Alibaba » Fastjson » Version: 1.2.7

cpe:2.3:a:alibaba:fastjson:1.2.7
Alibaba » Fastjson » Version: 1.2.70

cpe:2.3:a:alibaba:fastjson:1.2.70
Alibaba » Fastjson » Version: 1.2.71

cpe:2.3:a:alibaba:fastjson:1.2.71
Alibaba » Fastjson » Version: 1.2.72

cpe:2.3:a:alibaba:fastjson:1.2.72
Alibaba » Fastjson » Version: 1.2.73

cpe:2.3:a:alibaba:fastjson:1.2.73
Alibaba » Fastjson » Version: 1.2.74

cpe:2.3:a:alibaba:fastjson:1.2.74
Alibaba » Fastjson » Version: 1.2.75

cpe:2.3:a:alibaba:fastjson:1.2.75
Alibaba » Fastjson » Version: 1.2.76

cpe:2.3:a:alibaba:fastjson:1.2.76
Alibaba » Fastjson » Version: 1.2.78

cpe:2.3:a:alibaba:fastjson:1.2.78
Alibaba » Fastjson » Version: 1.2.79

cpe:2.3:a:alibaba:fastjson:1.2.79
Alibaba » Fastjson » Version: 1.2.8

cpe:2.3:a:alibaba:fastjson:1.2.8
Alibaba » Fastjson » Version: 1.2.80

cpe:2.3:a:alibaba:fastjson:1.2.80
Alibaba » Fastjson » Version: 1.2.9

cpe:2.3:a:alibaba:fastjson:1.2.9
Oracle » Communications Cloud Native Core Unified Data Repository » Version: 22.2.0

cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25845

Products

Pricing

Contact Us