● CVE — High
CVE-2020-35490
Vendordebian, fasterxml, oracle, netappProductdebian linux, jackson-databind, communications unified inventory management, agile product lifecycle management, webcenter portal, retail merchandising system, banking platform, communications interactive session recorder, communications services gatekeeper, communications diameter signaling router, communications instant messaging server, service level manager, retail xstore point of service, application testing suite, agile plm, insurance policy administration j2ee, banking virtual account management, blockchain platform, documaker, communications cloud native core policy, communications cloud native core unified data repository, communications evolved communications application server, communications pricing design center, autovue for agile product lifecycle management, communications offline mediation controller, banking treasury managementDiscoveredDec 17, 2020UpdatedAug 25, 2026
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.