Lucene search

CVE-2020-25649

🗓️ 03 Dec 2020 17:12:15Reported by [email protected]Type

FasterXML Jackson Databind entity expansion security flaw CVE-2020-25649

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 131
Cvelist	CVE-2020-25649	3 Dec 202016:16	–	cvelist
OSV	jackson-databind - security update	14 Oct 202000:00	–	osv
OSV	CVE-2020-25649	3 Dec 202017:15	–	osv
OSV	RHSA-2020:4401 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3 security update	13 Sep 202418:12	–	osv
OSV	XML External Entity (XXE) Injection in Jackson Databind	18 Feb 202120:51	–	osv
OSV	RHSA-2021:0381 Red Hat Security Advisory: RHV-M(ovirt-engine) 4.4.z security, bug fix, enhancement update [ovirt-4.4.4]	13 Sep 202418:16	–	osv
OSV	RHSA-2020:4312 Red Hat Security Advisory: rh-maven35-jackson-databind security update	13 Sep 202418:11	–	osv
OSV	CGA-JP8X-P2PF-PCP2	6 Jun 202412:28	–	osv
OSV	RHSA-2020:5341 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.4 security update	22 Sep 202417:04	–	osv
OSV	RHSA-2020:5342 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.4 security update	22 Sep 202417:05	–	osv

Nvd

Node

fasterxml jackson-databindRange2.6.0–2.6.7.4

fasterxml jackson-databindRange2.9.0–2.9.10.7

fasterxml jackson-databindRange2.10.0–2.10.5.1

Node

netapp oncommand_api_servicesMatch-

netapp oncommand_workflow_automationMatch-

netapp service_level_managerMatch-

Node

fedoraproject fedoraMatch32

Node

quarkus quarkusRange≤1.6.1

Node

apache iotdbRange<0.12.0

Node

oracle agile_plmMatch9.3.6

oracle agile_product_lifecycle_management_integration_packMatch3.6e-business_suite

oracle banking_apisRange18.1–18.3

oracle banking_apisMatch19.1

oracle banking_apisMatch19.2

oracle banking_apisMatch20.1

oracle banking_apisMatch21.1

oracle banking_platformMatch2.6.2

oracle banking_platformMatch2.7.0

oracle banking_platformMatch2.7.1

oracle banking_platformMatch2.8.0

oracle banking_platformMatch2.9.0

oracle banking_platformMatch2.10.0

oracle banking_treasury_managementMatch4.4

oracle blockchain_platformRange<21.1.2

oracle coherenceMatch12.2.1.4.0

oracle coherenceMatch14.1.1.0.0

oracle commerce_platformRange11.3.0–11.3.2

oracle commerce_platformMatch11.2.0

oracle communications_billing_and_revenue_managementMatch7.5.0.23.0

oracle communications_billing_and_revenue_managementMatch12.0.0.3.0

oracle communications_cloud_native_core_unified_data_repositoryMatch1.4.0

oracle communications_convergent_charging_controllerMatch12.0.4.0.0

oracle communications_evolved_communications_application_serverMatch7.1

oracle communications_instant_messaging_serverMatch10.0.1.5.0

oracle communications_interactive_session_recorderMatch6.3

oracle communications_interactive_session_recorderMatch6.4

oracle communications_network_charging_and_controlMatch12.0.4.0.0

oracle communications_offline_mediation_controllerMatch12.0.0.3

oracle communications_pricing_design_centerMatch12.0.0.4.0

oracle communications_services_gatekeeperMatch7.0

oracle communications_unified_inventory_managementMatch7.4.1

oracle goldengate_application_adaptersMatch19.1.0.0.0

oracle health_sciences_empirica_signalMatch9.0

oracle health_sciences_empirica_signalMatch9.1

oracle insurance_policy_administrationRange11.1.0–11.3.0

oracle insurance_policy_administrationMatch11.0.2

oracle insurance_rules_paletteRange11.1.0–11.3.0

oracle insurance_rules_paletteMatch11.0.2

oracle jd_edwards_enterpriseone_orchestratorRange<9.2.5.3

oracle jd_edwards_enterpriseone_toolsRange<9.2.5.3

oracle primavera_gatewayRange17.7–17.12

oracle primavera_gatewayRange17.12.0–17.12.11

oracle primavera_gatewayRange18.8.0–18.8.11

oracle primavera_gatewayRange19.12.0–19.12.10

oracle primavera_gatewayMatch20.12.0

oracle retail_service_backboneMatch14.1.3.2

oracle retail_service_backboneMatch15.0.3.1

oracle retail_service_backboneMatch16.0.3

oracle retail_xstore_point_of_serviceMatch16.0.6

oracle retail_xstore_point_of_serviceMatch17.0.4

oracle retail_xstore_point_of_serviceMatch18.0.3

oracle retail_xstore_point_of_serviceMatch19.0.2

oracle retail_xstore_point_of_serviceMatch20.0.1

oracle sd-wan_edgeMatch9.0

oracle utilities_frameworkMatch4.3.0.5.0

oracle utilities_frameworkMatch4.3.0.6.0

oracle utilities_frameworkMatch4.4.0.0.0

oracle utilities_frameworkMatch4.4.0.2.0

oracle utilities_frameworkMatch4.4.0.3.0

oracle webcenter_portalMatch12.2.1.3.0

oracle webcenter_portalMatch12.2.1.4.0

oracle communications_messaging_serverMatch8.0.2

oracle communications_messaging_serverMatch8.1

Source	Link
lists	www.lists.apache.org/thread.html/r2882fc1f3032cd7be66e28787f04ec6f1874ac68d47e310e30ff7eb1%40%3Cjira.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/r98bfe3b90ea9408f12c4b447edcb5638703d80bc782430aa0c210a54%40%3Cissues.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r765283e145049df9b8998f14dcd444345555aae02b1610cfb3188bf8%40%3Cnotifications.iotdb.apache.org%3E
lists	www.lists.apache.org/thread.html/r407538adec3185dd35a05c9a26ae2f74425b15132470cf540f41d85b%40%3Cissues.hive.apache.org%3E
oracle	www.oracle.com//security-alerts/cpujul2021.html
lists	www.lists.apache.org/thread.html/r6b11eca1d646f45eb0d35d174e6b1e47cfae5295b92000856bfb6304%40%3Cdev.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/rc88f2fa2b7bd6443921727aeee7704a1fb02433e722e2abf677e0d3d%40%3Ccommits.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r8ae961c80930e2717c75025414ce48a432cea1137c02f648b1fb9524%40%3Cissues.hive.apache.org%3E
lists	www.lists.apache.org/thread.html/r91722ecfba688b0c565675f8bf380269fde8ec62b54d6161db544c22%40%3Ccommits.karaf.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuoct2021.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Dec 2020 17:15Current

7.4High risk

Vulners AI Score7.4

CVSS25

CVSS37.5

EPSS0.00013

CWE-611