● CVE — High
CVE-2020-25649
Vendorfedoraproject, quarkus, fasterxml, netapp, oracleProductfedora, quarkus, jackson-databind, oncommand workflow automation, agile product lifecycle management, banking platform, communications interactive session recorder, communications services gatekeeper, communications billing and revenue management, communications instant messaging server, oncommand api services, service level manager, agile plm, commerce platform, blockchain platform, agile product lifecycle management integration pack, communications cloud native core unified data repository, communications evolved communications application server, banking apis, communications pricing design center, communications network charging and control, coherence, iotdb, communications offline mediation controller, banking treasury management, communications convergent charging controllerDiscoveredDec 3, 2020UpdatedAug 25, 2026
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.