Lucene search

CVE-2020-9548

🗓️ 02 Mar 2020 04:11:15Reported by mitreType

FasterXML jackson-databind 2.x before 2.9.10.4 CVE-2020-954

Reporter	Title	Published	Views	Family All 97
Cvelist	CVE-2020-9548	2 Mar 202003:58	–	cvelist
NVD	CVE-2020-9548	2 Mar 202004:15	–	nvd
UbuntuCve	CVE-2020-9548	2 Mar 202000:00	–	ubuntucve
OSV	CVE-2020-9548	2 Mar 202004:15	–	osv
OSV	jackson-databind mishandles the interaction between serialization gadgets and typing	15 May 202018:59	–	osv
OSV	jackson-databind - security update	6 Mar 202000:00	–	osv
OSV	Red Hat Bug Fix Advisory: Satellite 6.7.2 Async Bug Fix Update	13 Sep 202422:40	–	osv
OSV	Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update	28 Apr 202009:00	–	osv
OSV	Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update	13 Sep 202422:39	–	osv
OSV	Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update	28 Apr 202009:00	–	osv

Nvd

Node

fasterxml jackson-databindRange2.0.0–2.7.9.7

fasterxml jackson-databindRange2.8.0–2.8.11.6

fasterxml jackson-databindRange2.9.0–2.9.10.4

Node

netapp active_iq_unified_managerRange7.3≥linux

netapp active_iq_unified_managerRange7.3≥windows

netapp active_iq_unified_managerRange9.5≥vmware_vsphere

Node

debian debian_linuxMatch8.0

Node

oracle agile_plmMatch9.3.6

oracle autovue_for_agile_product_lifecycle_managementMatch21.0.2

oracle banking_digital_experienceMatch18.1

oracle banking_digital_experienceMatch18.2

oracle banking_digital_experienceMatch18.3

oracle banking_digital_experienceMatch19.1

oracle banking_digital_experienceMatch19.2

oracle banking_digital_experienceMatch20.1

oracle banking_platformRange2.4.0–2.9.0

oracle communications_calendar_serverMatch8.0.0.4.0

oracle communications_contacts_serverMatch8.0.0.4.0

oracle communications_contacts_serverMatch8.0.0.5.0

oracle communications_diameter_signaling_routerRange8.0.0–8.2.2

oracle communications_element_managerRange8.2.0–8.2.2

oracle communications_evolved_communications_application_serverMatch7.1

oracle communications_instant_messaging_serverMatch10.0.1.4.0

oracle communications_network_charging_and_controlRange12.0.0–12.0.3

oracle communications_network_charging_and_controlMatch6.0.1

oracle communications_session_report_managerRange8.2.0–8.2.2

oracle communications_session_route_managerRange8.2.0–8.2.2

oracle enterprise_manager_base_platformMatch13.3.0.0

oracle enterprise_manager_base_platformMatch13.4.0.0

oracle global_lifecycle_management_opatchRange<12.2.0.1.20

oracle jd_edwards_enterpriseone_orchestratorRange<9.2.4.2

oracle jd_edwards_enterpriseone_toolsRange<9.2.4.2

oracle primavera_unifierRange17.7–17.12

oracle primavera_unifierMatch16.1

oracle primavera_unifierMatch16.2

oracle primavera_unifierMatch18.8

oracle primavera_unifierMatch19.12

oracle retail_merchandising_systemMatch15.0

oracle retail_sales_auditMatch14.1

oracle retail_xstore_point_of_serviceMatch15.0

oracle retail_xstore_point_of_serviceMatch16.0

oracle retail_xstore_point_of_serviceMatch17.0

oracle retail_xstore_point_of_serviceMatch18.0

oracle retail_xstore_point_of_serviceMatch19.0

oracle weblogic_serverMatch12.2.1.3.0

oracle weblogic_serverMatch12.2.1.4.0

Source	Link
medium	www.medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
github	www.github.com/FasterXML/jackson-databind/issues/2634
lists	www.lists.apache.org/thread.html/rdd49ab9565bec436a896bc00c4b9fc9dce1598e106c318524fbdfec6%40%3Cissues.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r98c9b6e4c9e17792e2cd1ec3e4aa20b61a791939046d3f10888176bb%40%3Cissues.zookeeper.apache.org%3E
lists	www.lists.debian.org/debian-lts-announce/2020/03/msg00008.html
lists	www.lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
security	www.security.netapp.com/advisory/ntap-20200904-0006/
lists	www.lists.apache.org/thread.html/rd5a4457be4623038c3989294429bc063eec433a2e55995d81591e2ca%40%3Cissues.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/rdd4df698d5d8e635144d2994922bf0842e933809eae259521f3b5097%40%3Cissues.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r35d30db00440ef63b791c4b7f7acb036e14d4a23afa2a249cb66c0fd%40%3Cissues.zookeeper.apache.org%3E

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Mar 2020 04:15Current

9.1High risk

Vulners AI Score9.1

CVSS26.8

CVSS39.8

EPSS0.004

CWE-502