CVE-2020-10650

🗓️ 26 Dec 2022 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 249 Views

Deserialization flaw in jackson-databind allows code executio

Reporter	Title	Published	Views	Family All 82
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance is vulnerable to arbitrary code execution (CVE-2020-10650)	20 Apr 202310:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	6 Jan 202321:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple CVEs affect IBM Integration Designer	1 Feb 202319:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in jackson-databind affect IBM Application Performance Management products	15 Sep 202305:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance is vulnerable to a denial of service caused by multiple vulnerabilities.	13 Apr 202310:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Data-Binding for Jackson shipped with IBM Operations Analytics - Log Analysis	22 Nov 202208:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a remote code execution vulnerability (CVE-2020-10650)	1 Jun 202314:57	–	ibm
AstraLinux	Astra Linux - уязвимость в jackson-databind	3 May 202623:59	–	astralinux
BDU FSTEC	The vulnerability of the ignite-jta class in the Jackson-databind library of the FasterXML project allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	16 Feb 202100:00	–	bdu_fstec
Circl	CVE-2020-10650	26 Dec 202222:40	–	circl

NVD

Node

debian debian_linuxMatch10.0

Node

netapp active_iq_unified_managerMatch-linux

OR

netapp active_iq_unified_managerMatch-vmware_vsphere

OR

netapp active_iq_unified_managerMatch-windows

Node

fasterxml jackson-databindRange<2.9.10.4

OR

fasterxml jackson-databindMatch2.10.0prerelease1

OR

fasterxml jackson-databindMatch2.10.0prerelease2

OR

fasterxml jackson-databindMatch2.10.0prerelease3

Node

oracle retail_merchandising_systemMatch15.0

OR

oracle retail_sales_auditMatch14.1

Source	Link
github	www.github.com/FasterXML/jackson-databind/commit/a424c038ba0c0d65e579e22001dec925902ac0ef
github	www.github.com/advisories/GHSA-rpr3-cw39-3pxh
oracle	www.oracle.com/security-alerts/cpujan2021.html
security	www.security.netapp.com/advisory/ntap-20230818-0007/
github	www.github.com/FasterXML/jackson-databind/issues/2658
medium	www.medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
oracle	www.oracle.com/security-alerts/cpuoct2022.html
lists	www.lists.debian.org/debian-lts-announce/2023/04/msg00032.html

19 Aug 2025 16:37Current

8.1High risk

Vulners AI Score8.1

CVSS 3.18.1

EPSS0.09009

SSVC

CWE-502 In Wild

cve-2020-10650 deserialization jackson-databind code execution nvd security issue