● CVE — High
CVE-2020-11111
Vendordebian, fasterxml, oracle, netappProductdebian linux, jackson-databind, agile product lifecycle management, primavera unifier, weblogic server, jd edwards enterpriseone tools, retail merchandising system, banking platform, steelstore cloud integrated storage, communications diameter signaling router, communications instant messaging server, retail xstore point of service, enterprise manager base platform, agile plm, communications element manager, communications session report manager, communications session route manager, retail sales audit, global lifecycle management opatch, jd edwards enterpriseone orchestrator, banking digital experience, communications evolved communications application server, communications calendar server, communications contacts server, communications network charging and control, autovue for agile product lifecycle managementDiscoveredMar 31, 2020UpdatedAug 25, 2026
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms).