● CVE — High
CVE-2020-11619
Vendordebian, fasterxml, netapp, oracleProductdebian linux, jackson-databind, active iq unified manager, agile product lifecycle management, primavera unifier, weblogic server, jd edwards enterpriseone tools, retail merchandising system, banking platform, steelstore cloud integrated storage, communications diameter signaling router, communications instant messaging server, retail xstore point of service, enterprise manager base platform, agile plm, retail sales audit, global lifecycle management opatch, jd edwards enterpriseone orchestrator, communications evolved communications application server, communications calendar server, communications contacts server, communications network charging and controlDiscoveredApr 7, 2020UpdatedAug 25, 2026
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).