fasterxml jackson-databind, oracle agile product lifecycle management, oracle application testing suite +23 lainnya
CVSS 8.1 · High EPSS 7,3%
Kerentanan Deserialization of Untrusted Data pada fasterxml jackson-databind, oracle agile product lifecycle management +24 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD.
FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| fasterxml | jackson-databind | Versi 2.0.0 hingga sebelum 2.6.7.5 |
| fasterxml | jackson-databind | Versi 2.7.0 hingga sebelum 2.9.10.6 |
| oracle | agile product lifecycle management | Versi 9.3.6 |
| oracle | application testing suite | Versi 13.3.0.1 |
| oracle | autovue for agile product lifecycle management | Versi 21.0.2 |
| oracle | banking corporate lending process management | Versi 14.2.0 |
| oracle | banking corporate lending process management | Versi 14.3.0 |
| oracle | banking corporate lending process management | Versi 14.5.0 |
| oracle | banking credit facilities process management | Versi 14.2.0 |
| oracle | banking credit facilities process management | Versi 14.3.0 |
| oracle | banking credit facilities process management | Versi 14.5.0 |
| oracle | banking liquidity management | Versi 14.2 |
| oracle | banking liquidity management | Versi 14.3 |
| oracle | banking liquidity management | Versi 14.5 |
| oracle | banking supply chain finance | Versi 14.2.0 |
| oracle | banking supply chain finance | Versi 14.3.0 |
| oracle | banking supply chain finance | Versi 14.5.0 |
| oracle | blockchain platform | Semua versi sebelum 21.1.2 |
| oracle | communications calendar server | Versi 8.0 |
| oracle | communications calendar server | Versi 8.0.0.4.0 |
| oracle | communications contacts server | Versi 8.0 |
| oracle | communications contacts server | Versi 8.0.0.5.0 |
| oracle | communications diameter signaling router | Versi 8.0.0 hingga 8.2.2 |
| oracle | communications element manager | Versi 8.2.0 hingga 8.2.4.0 |
| oracle | communications instant messaging server | Versi 10.0.1.5.0 |
| oracle | communications messaging server | Versi 8.1 |
| oracle | communications offline mediation controller | Versi 12.0.0.3.0 |
| oracle | communications policy management | Versi 12.5.0 |
| oracle | communications pricing design center | Versi 12.0.0.4.0 |
| oracle | communications services gatekeeper | Versi 7.0 |
| oracle | communications session report manager | Versi 8.0.0.0 hingga 8.2.2.1 |
| oracle | communications session route manager | Versi 8.2.0 hingga 8.2.2.1 |
| oracle | communications unified inventory management | Versi 7.4.1 |
| oracle | identity manager connector | Versi 11.1.1.5.0 |
| oracle | siebel core - server framework | Semua versi hingga 21.5 |
| oracle | siebel ui framework | Semua versi hingga 21.2 |
| debian | debian linux | Versi 9.0 |