diff --git a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
index 181b1b0ca..71776a9a1 100644
--- a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
+++ b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
@@ -462,15 +462,15 @@
- com\.fasterxml\.jackson\.core:jackson.*
+ (org\.codehaus\.jackson|com\.fasterxml\.jackson\.core):jackson.*
CVE-2016-3720
+ This CVE only affects jackson-dataformat-xml. See issue #517.
+ ]]>
com\.fasterxml\.jackson\.dataformat:jackson(?!\-dataformat\-xml).*
CVE-2016-3720