Lucene search
MitreCVELIST:CVE-2020-14060HistoryJun 14, 2020 - 8:46 p.m.
CVE-2020-14060
2020-06-1420:46:47
mitre
www.cve.org
3
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).
References
github.com/FasterXML/jackson-databind/issues/2688
lists.debian.org/debian-lts-announce/2020/07/msg00001.html
medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
security.netapp.com/advisory/ntap-20200702-0003/
www.oracle.com//security-alerts/cpujul2021.html
www.oracle.com/security-alerts/cpuApr2021.html
www.oracle.com/security-alerts/cpujan2021.html
www.oracle.com/security-alerts/cpuoct2020.html
www.oracle.com/security-alerts/cpuoct2021.html
Related
nvd
nvd
CVE-2020-14060
2020-06-14 21:15:09
osv
osv
CVE-2020-14060
2020-06-14 21:15:09
Deserialization of untrusted data in Jackson Databind
2020-06-18 14:44:46
jackson-databind - security update
2020-07-01 00:00:00
github
github
Deserialization of untrusted data in Jackson Databind
2020-06-18 14:44:46
veracode
veracode
Remote Code Execution
2020-06-15 05:12:43
cve
cve
CVE-2020-14060
2020-06-14 21:15:09
ubuntucve
ubuntucve
CVE-2020-14060
2020-06-14 00:00:00
redhatcve
redhatcve
CVE-2020-14060
2020-06-19 12:25:04
prion
prion
Design/Logic Flaw
2020-06-14 21:15:00
debiancve
debiancve
CVE-2020-14060
2020-06-14 21:15:09
nessus
nessus
Debian DLA-2270-1 : jackson-databind security update
2020-07-02 00:00:00
FreeBSD : puppetdb -- Multiple vulnerabilities (10e3ed8a-db7f-11ea-8bdf-643150d3111d)
2020-08-11 00:00:00
RHEL 8 : opendaylight (Unpatched Vulnerability)
2024-06-03 00:00:00
debian
debian
[SECURITY] [DLA 2270-1] jackson-databind security update
2020-07-01 12:28:47
openvas
openvas
Debian: Security Advisory (DLA-2270-1)
2020-07-02 00:00:00
Mageia: Security Advisory (MGASA-2021-0153)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-4813-1)
2023-01-27 00:00:00
freebsd
freebsd
puppetdb -- Multiple vulnerabilities
2020-07-23 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Faster-XML jackson databind affects IBM Operations Analytics Predictive Insights (CVE-2019-14060, CVE-2019-14661, CVE-2019-14662)
2020-08-12 15:08:34
redhat
redhat
mageia
mageia
Updated jackson-databind packages fix security vulnerabilities
2021-03-27 17:27:02
ubuntu
ubuntu
Jackson Databind vulnerabilities
2021-03-15 00:00:00
hp
hp
HP Device Manager Security Updates
2023-10-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00