CVE-2020-5075

CVE-2020-5075 entry is rejected/not used per the initial description.

CVE-2020-5069

CVE-2020-5069 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2020-5065

CVE-2020-5065 entry is rejected/not used; this CVE ID does not represent an active vulnerability.

CVE-2020-5063

This CVE-2020-5063 entry is rejected/not used and does not represent an active vulnerability.

CVE-2020-5062

CVE-2020-5062 entry is rejected/not used and does not represent an active vulnerability.

CVE-2020-5058

This CVE-2020-5058 entry is rejected/not used and does not represent an active vulnerability.

CVE-2020-5053

CVE-2020-5053 is rejected/not used and does not represent an active vulnerability entry.

CVE-2020-5050

CVE-2020-5050 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2020-5049

This CVE entry is rejected and not used; it does not represent an active vulnerability.

CVE-2020-5041

CVE-2020-5041 is rejected/not used per the initial description and does not represent an active vulnerability entry.

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

CVE-2020-17536

CVE-2020-17536 is rejected/not used and does not represent an active vulnerability entry.

PT-2021-3167

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.0 through 2.9.10.7 Description The issue is related to the interaction between serialization gadgets and typing, specifically involving the org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource...

PT-2021-3163

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.x before 2.9.10.8 Description The issue is related to the interaction between serialization gadgets and typing in the FasterXML jackson-databind library, specifically with the...

PT-2021-3168

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.x before 2.9.10.8 Description The issue is related to the interaction between serialization gadgets and typing, specifically involving the org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource...

DEBIAN-CVE-2020-35728

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl...

UBUNTU-CVE-2020-35728

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl...

CVE-2020-35728

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl...

PT-2020-5529

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.x before 2.9.10.8 Description The issue is related to the mishandling of the interaction between serialization gadgets and typing in the Jackson-databind library, specifically with...