Search/CVE-2020-24750
● CVE — High

CVE-2020-24750

Vendorfasterxml, oracleProductjackson-databind, communications unified inventory management, agile product lifecycle management, communications services gatekeeper, communications diameter signaling router, communications instant messaging server, application testing suite, communications policy management, siebel core - server framework, agile plm, communications element manager, communications session report manager, communications session route manager, siebel ui framework, identity manager connector, banking corporate lending process management, banking credit facilities process management, banking supply chain finance, communications messaging server, blockchain platform, communications calendar server, communications pricing design center, communications contacts server, banking liquidity management, autovue for agile product lifecycle management, communications offline mediation controllerDiscoveredSep 17, 2020UpdatedAug 25, 2026

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.

CVSS v3.1
8.1 HIGH
EPSS
7.33%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage