CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).

• Debian

  OS
  Debian
  8.0

• Fasterxml Jackson Databind

  APP
  Fasterxml
  2.8.0 – 2.8.11.6 (bez)2.9.0 – 2.9.10.4 (bez)2.0.0 – 2.7.9.7 (bez)

• Netapp Active Iq Unified Manager

  APP
  Netapp
  ≥ 7.3≥ 9.5

• Oracle Agile Plm

  APP
  Oracle
  9.3.6

• Oracle Autovue For Agile Product Lifecycle Management

  APP
  Oracle
  21.0.2

• Oracle Banking Digital Experience

  APP
  Oracle
  18.118.218.319.119.220.1

• Oracle Banking Platform

  APP
  Oracle
  2.4.0 – 2.9.0

• Oracle Communications Calendar Server

  APP
  Oracle
  8.0.0.4.0

• Oracle Communications Contacts Server

  APP
  Oracle
  8.0.0.4.08.0.0.5.0

• Oracle Communications Diameter Signaling Router

  APP
  Oracle
  8.0.0 – 8.2.2

• Oracle Communications Element Manager

  APP
  Oracle
  8.2.0 – 8.2.2

• Oracle Communications Evolved Communications Application Server

  APP
  Oracle
  7.1

• Oracle Communications Instant Messaging Server

  APP
  Oracle
  10.0.1.4.0

• Oracle Communications Network Charging And Control

  APP
  Oracle
  6.0.112.0.0 – 12.0.3

• Oracle Communications Session Report Manager

  APP
  Oracle
  8.2.0 – 8.2.2

• Oracle Communications Session Route Manager

  APP
  Oracle
  8.2.0 – 8.2.2

• Oracle Enterprise Manager Base Platform

  APP
  Oracle
  13.3.0.013.4.0.0

• Oracle Financial Services Analytical Applications Infrastructure

  APP
  Oracle
  8.0.6 – 8.1.0

• Oracle Financial Services Institutional Performance Analytics

  APP
  Oracle
  8.0.68.0.78.1.08.7.0

• Oracle Financial Services Price Creation And Discovery

  APP
  Oracle
  8.0.68.0.7

• Oracle Financial Services Retail Customer Analytics

  APP
  Oracle
  8.0.6

• Oracle Global Lifecycle Management Opatch

  APP
  Oracle
  < 12.2.0.1.20

• Oracle Insurance Policy Administration J2ee

  APP
  Oracle
  11.0.2.2511.1.0.15

• Oracle Jd Edwards Enterpriseone Orchestrator

  APP
  Oracle
  < 9.2.4.2

• Oracle Jd Edwards Enterpriseone Tools

  APP
  Oracle
  < 9.2.4.2

• Oracle Primavera Unifier

  APP
  Oracle
  16.116.218.819.1217.7 – 17.12

• Oracle Retail Merchandising System

  APP
  Oracle
  15.0

• Oracle Retail Sales Audit

  APP
  Oracle
  14.1

• Oracle Retail Service Backbone

  APP
  Oracle
  14.115.016.0

• Oracle Retail Xstore Point Of Service

  APP
  Oracle
  15.016.017.018.019.0