Search/CVE-2020-11619
● CVE — High

CVE-2020-11619

Vendordebian, fasterxml, netapp, oracleProductdebian linux, jackson-databind, active iq unified manager, agile product lifecycle management, primavera unifier, weblogic server, jd edwards enterpriseone tools, retail merchandising system, banking platform, steelstore cloud integrated storage, communications diameter signaling router, communications instant messaging server, retail xstore point of service, enterprise manager base platform, agile plm, retail sales audit, global lifecycle management opatch, jd edwards enterpriseone orchestrator, communications evolved communications application server, communications calendar server, communications contacts server, communications network charging and controlDiscoveredApr 7, 2020UpdatedAug 25, 2026

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).

CVSS v3.1
8.1 HIGH
EPSS
3.68%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage