Search/CVE-2020-24616
● CVE — High

CVE-2020-24616

Vendordebian, fasterxml, netapp, oracleProductdebian linux, jackson-databind, active iq unified manager, communications unified inventory management, agile product lifecycle management, communications services gatekeeper, communications diameter signaling router, communications instant messaging server, application testing suite, communications policy management, agile plm, communications element manager, communications session report manager, siebel ui framework, identity manager connector, banking supply chain finance, communications messaging server, blockchain platform, communications cloud native core unified data repository, communications evolved communications application server, communications calendar server, communications pricing design center, communications contacts server, banking liquidity management, autovue for agile product lifecycle management, communications offline mediation controllerDiscoveredAug 25, 2020UpdatedAug 25, 2026

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).

CVSS v3.1
8.1 HIGH
EPSS
7.61%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
Aug 25, 2020
Disclosure — published as a CVE record. · last revised by NVD Aug 25, 2026
Public PoC (1)
Unverified third-party code — review before executing.