● CVE — High
CVE-2020-10673
Vendordebian, fasterxml, oracle, netappProductdebian linux, jackson-databind, agile product lifecycle management, jd edwards enterpriseone tools, financial services analytical applications infrastructure, financial services price creation and discovery, banking platform, steelstore cloud integrated storage, communications diameter signaling router, communications instant messaging server, enterprise manager base platform, agile plm, communications element manager, communications session report manager, communications session route manager, insurance policy administration j2ee, global lifecycle management opatch, jd edwards enterpriseone orchestrator, banking digital experience, communications evolved communications application server, communications calendar server, communications contacts server, communications network charging and control, autovue for agile product lifecycle management, financial services institutional performance analytics, financial services retail customer analyticsDiscoveredMar 18, 2020UpdatedAug 25, 2026
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).