fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +28 lainnya
CVSS 8.8 · High EPSS 3,6%
Kerentanan Deserialization of Untrusted Data pada fasterxml jackson-databind, debian linux +29 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| fasterxml | jackson-databind | Versi 2.9.0 hingga sebelum 2.9.10.4 |
| debian | debian linux | Versi 8.0 |
| netapp | steelstore cloud integrated storage | Semua versi |
| oracle | agile product lifecycle management | Versi 9.3.6 |
| oracle | autovue for agile product lifecycle management | Versi 21.0.2 |
| oracle | banking digital experience | Versi 18.1 |
| oracle | banking digital experience | Versi 18.2 |
| oracle | banking digital experience | Versi 18.3 |
| oracle | banking digital experience | Versi 19.1 |
| oracle | banking digital experience | Versi 19.2 |
| oracle | banking digital experience | Versi 20.1 |
| oracle | banking platform | Versi 2.4.0 hingga 2.9.0 |
| oracle | communications calendar server | Versi 8.0.0.4.0 |
| oracle | communications contacts server | Versi 8.0.0.4.0 |
| oracle | communications contacts server | Versi 8.0.0.5.0 |
| oracle | communications diameter signaling router | Versi 8.0.0 hingga 8.2.2 |
| oracle | communications element manager | Versi 8.2.0 hingga 8.2.2 |
| oracle | communications evolved communications application server | Versi 7.1 |
| oracle | communications instant messaging server | Versi 10.0.1.4.0 |
| oracle | communications network charging and control | Versi 12.0.0 hingga 12.0.3 |
| oracle | communications network charging and control | Versi 6.0.1 |
| oracle | communications session report manager | Versi 8.2.0 hingga 8.2.2 |
| oracle | communications session route manager | Versi 8.2.0 hingga 8.2.2 |
| oracle | enterprise manager base platform | Versi 13.3.0.0 |
| oracle | enterprise manager base platform | Versi 13.4.0.0 |
| oracle | financial services analytical applications infrastructure | Versi 8.0.6 hingga 8.1.0 |
| oracle | financial services institutional performance analytics | Versi 8.0.6 |
| oracle | financial services institutional performance analytics | Versi 8.0.7 |
| oracle | financial services institutional performance analytics | Versi 8.1.0 |
| oracle | financial services price creation and discovery | Versi 8.0.6 |
| oracle | financial services price creation and discovery | Versi 8.0.7 |
| oracle | financial services retail customer analytics | Versi 8.0.6 |
| oracle | global lifecycle management opatch | Semua versi sebelum 12.2.0.1.20 |
| oracle | insurance policy administration j2ee | Versi 11.0.2.25 |
| oracle | insurance policy administration j2ee | Versi 11.1.0.15 |
| oracle | jd edwards enterpriseone orchestrator | Semua versi sebelum 9.2.4.2 |
| oracle | jd edwards enterpriseone tools | Semua versi sebelum 9.2.4.2 |
| oracle | primavera unifier | Versi 17.7 hingga 17.12 |
| oracle | primavera unifier | Versi 16.1 |
| oracle | primavera unifier | Versi 16.2 |
| oracle | primavera unifier | Versi 18.8 |
| oracle | primavera unifier | Versi 19.12 |
| oracle | retail merchandising system | Versi 15.0 |
| oracle | retail sales audit | Versi 14.1 |
| oracle | retail service backbone | Versi 14.1 |
| oracle | retail service backbone | Versi 15.0 |
| oracle | retail service backbone | Versi 16.0 |
| oracle | retail xstore point of service | Versi 15.0 |
| oracle | retail xstore point of service | Versi 16.0 |
| oracle | retail xstore point of service | Versi 17.0 |
| oracle | retail xstore point of service | Versi 18.0 |
| oracle | retail xstore point of service | Versi 19.0 |
| oracle | weblogic server | Versi 12.2.1.3.0 |
| oracle | weblogic server | Versi 12.2.1.4.0 |