CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).

• Debian

  OS
  Debian
  8.0

• Fasterxml Jackson Databind

  APP
  Fasterxml
  2.8.0 – 2.8.11.6 (bez)2.9.0 – 2.9.10.4 (bez)2.0.0 – 2.7.9.7 (bez)

• Netapp Active Iq Unified Manager

  APP
  Netapp
  ≥ 9.5≥ 7.3

• Oracle Agile Plm

  APP
  Oracle
  9.3.6

• Oracle Autovue For Agile Product Lifecycle Management

  APP
  Oracle
  21.0.2

• Oracle Banking Digital Experience

  APP
  Oracle
  18.118.218.319.119.220.1

• Oracle Banking Platform

  APP
  Oracle
  2.4.0 – 2.9.0

• Oracle Communications Calendar Server

  APP
  Oracle
  8.0.0.4.0

• Oracle Communications Contacts Server

  APP
  Oracle
  8.0.0.4.08.0.0.5.0

• Oracle Communications Diameter Signaling Router

  APP
  Oracle
  8.0.0 – 8.2.2

• Oracle Communications Element Manager

  APP
  Oracle
  8.2.0 – 8.2.2

• Oracle Communications Evolved Communications Application Server

  APP
  Oracle
  7.1

• Oracle Communications Instant Messaging Server

  APP
  Oracle
  10.0.1.4.0

• Oracle Communications Network Charging And Control

  APP
  Oracle
  6.0.112.0.0 – 12.0.3

• Oracle Communications Session Report Manager

  APP
  Oracle
  8.2.0 – 8.2.2

• Oracle Communications Session Route Manager

  APP
  Oracle
  8.2.0 – 8.2.2

• Oracle Enterprise Manager Base Platform

  APP
  Oracle
  13.3.0.013.4.0.0

• Oracle Global Lifecycle Management Opatch

  APP
  Oracle
  < 12.2.0.1.20

• Oracle Jd Edwards Enterpriseone Orchestrator

  APP
  Oracle
  < 9.2.4.2

• Oracle Jd Edwards Enterpriseone Tools

  APP
  Oracle
  < 9.2.4.2

• Oracle Primavera Unifier

  APP
  Oracle
  16.116.218.819.1217.7 – 17.12

• Oracle Retail Merchandising System

  APP
  Oracle
  15.0

• Oracle Retail Sales Audit

  APP
  Oracle
  14.1

• Oracle Retail Xstore Point Of Service

  APP
  Oracle
  15.016.017.018.019.0

• Oracle Weblogic Server

  APP
  Oracle
  12.2.1.3.012.2.1.4.0