fasterxml jackson-databind, debian linux, netapp service level manager +35 lainnya
CVSS 8.1 · High EPSS 12,5%
Kerentanan Deserialization of Untrusted Data pada fasterxml jackson-databind, debian linux +36 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD.
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| fasterxml | jackson-databind | Versi 2.0.0 hingga sebelum 2.6.7.5 |
| fasterxml | jackson-databind | Versi 2.7.0 hingga sebelum 2.9.10.8 |
| debian | debian linux | Versi 9.0 |
| netapp | service level manager | Semua versi |
| oracle | agile product lifecycle management | Versi 9.3.6 |
| oracle | application testing suite | Versi 13.3.0.1 |
| oracle | autovue | Versi 21.0.2 |
| oracle | banking corporate lending process management | Versi 14.2 |
| oracle | banking corporate lending process management | Versi 14.3 |
| oracle | banking corporate lending process management | Versi 14.5 |
| oracle | banking credit facilities process management | Versi 14.2 |
| oracle | banking credit facilities process management | Versi 14.3 |
| oracle | banking credit facilities process management | Versi 14.5 |
| oracle | banking extensibility workbench | Versi 14.2 |
| oracle | banking extensibility workbench | Versi 14.3 |
| oracle | banking extensibility workbench | Versi 14.5 |
| oracle | banking supply chain finance | Versi 14.2 |
| oracle | banking supply chain finance | Versi 14.3 |
| oracle | banking supply chain finance | Versi 14.5 |
| oracle | banking treasury management | Versi 14.4 |
| oracle | banking virtual account management | Versi 14.2.0 |
| oracle | banking virtual account management | Versi 14.3.0 |
| oracle | banking virtual account management | Versi 14.5.0 |
| oracle | blockchain platform | Semua versi hingga 21.1.2 |
| oracle | commerce platform | Versi 11.3.0 hingga 11.3.2 |
| oracle | commerce platform | Versi 11.2.0 |
| oracle | communications billing and revenue management | Versi 7.5.0.23.0 |
| oracle | communications billing and revenue management | Versi 12.0.0.3.0 |
| oracle | communications cloud native core policy | Versi 1.14.0 |
| oracle | communications cloud native core unified data repository | Versi 1.4.0 |
| oracle | communications convergent charging controller | Versi 12.0.4.0.0 |
| oracle | communications diameter signaling route | Versi 8.0.0.0 hingga 8.5.0.0 |
| oracle | communications element manager | Versi 8.2.0.0 hingga 8.2.4.0 |
| oracle | communications evolved communications application server | Versi 7.1 |
| oracle | communications network charging and control | Versi 12.0.4.0.0 |
| oracle | communications policy management | Versi 12.5.0 |
| oracle | communications services gatekeeper | Versi 7.0 |
| oracle | communications session report manager | Versi 8.0.0.0 hingga 8.2.2.1 |
| oracle | communications session route manager | Versi 8.2.0.0 hingga 8.2.2.1 |
| oracle | communications unified inventory management | Versi 7.4.1 |
| oracle | data integrator | Versi 12.2.1.4.0 |
| oracle | goldengate application adapters | Versi 19.1.0.0.0 |
| oracle | insurance policy administration | Versi 11.1.0 hingga 11.3.0 |
| oracle | insurance policy administration | Versi 11.0.2 |
| oracle | insurance rules palette | Versi 11.1.0 hingga 11.3.0 |
| oracle | insurance rules palette | Versi 11.0.2 |
| oracle | jd edwards enterpriseone orchestrator | Semua versi sebelum 9.2.5.3 |
| oracle | jd edwards enterpriseone tools | Semua versi sebelum 9.2.5.3 |
| oracle | primavera gateway | Versi 17.12.0 hingga 17.12.11 |
| oracle | primavera gateway | Versi 18.8.0 hingga 18.8.11 |
| oracle | primavera gateway | Versi 19.12.0 hingga 19.12.10 |
| oracle | primavera gateway | Versi 20.12.0 |
| oracle | primavera unifier | Versi 17.7 hingga 17.12 |
| oracle | primavera unifier | Versi 18.8 hingga 19.12 |
| oracle | primavera unifier | Versi 20.12 |
| oracle | retail customer management and segmentation foundation | Versi 16.0 hingga 19.0 |
| oracle | retail merchandising system | Versi 15.0.3 |
| oracle | retail service backbone | Versi 14.1.3.2 |
| oracle | retail service backbone | Versi 15.0.3.1 |
| oracle | retail service backbone | Versi 16.0.3.0 |