CVE-2020-35490
17.12.2020, 19:15
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fasterxml | jackson-databind | 2.0.0 ≤ 𝑥 < 2.9.10.8 |
| netapp | service_level_manager | - |
| debian | debian_linux | 9.0 |
| oracle | agile_product_lifecycle_management | 9.3.6 |
| oracle | application_testing_suite | 13.3.0.1 |
| oracle | autovue_for_agile_product_lifecycle_management | 21.0.2 |
| oracle | banking_platform | 2.6.2 |
| oracle | banking_platform | 2.7.0 |
| oracle | banking_platform | 2.7.1 |
| oracle | banking_platform | 2.8.0 |
| oracle | banking_platform | 2.9.0 |
| oracle | banking_platform | 2.10.0 |
| oracle | banking_treasury_management | 14.4 |
| oracle | banking_virtual_account_management | 14.2.0 |
| oracle | banking_virtual_account_management | 14.3.0 |
| oracle | banking_virtual_account_management | 14.5.0 |
| oracle | blockchain_platform | 𝑥 ≤ 21.1.2 |
| oracle | communications_cloud_native_core_policy | 1.14.0 |
| oracle | communications_cloud_native_core_unified_data_repository | 1.4.0 |
| oracle | communications_diameter_signaling_router | 8.0.0 ≤ 𝑥 ≤ 8.5.0 |
| oracle | communications_evolved_communications_application_server | 7.1 |
| oracle | communications_instant_messaging_server | 10.0.1.5.0 |
| oracle | communications_interactive_session_recorder | 6.3 |
| oracle | communications_interactive_session_recorder | 6.4 |
| oracle | communications_offline_mediation_controller | 12.0.0.3 |
| oracle | communications_pricing_design_center | 12.0.0.4.0 |
| oracle | communications_services_gatekeeper | 7.0 |
| oracle | communications_unified_inventory_management | 7.4.1 |
| oracle | documaker | 12.6.3 |
| oracle | documaker | 12.6.4 |
| oracle | insurance_policy_administration_j2ee | 11.2.0 |
| oracle | retail_merchandising_system | 15.0.3 |
| oracle | retail_xstore_point_of_service | 16.0.6 |
| oracle | retail_xstore_point_of_service | 17.0.4 |
| oracle | retail_xstore_point_of_service | 18.0.3 |
| oracle | retail_xstore_point_of_service | 19.0.2 |
| oracle | webcenter_portal | 12.2.1.3.0 |
| oracle | webcenter_portal | 12.2.1.4.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References