● CVE — High
CVE-2020-35491
Vendordebian, fasterxml, oracle, netappProductdebian linux, jackson-databind, communications unified inventory management, agile product lifecycle management, retail merchandising system, banking platform, communications services gatekeeper, communications instant messaging server, communications diameter signaling route, service level manager, retail xstore point of service, application testing suite, agile plm, insurance policy administration j2ee, retail customer management and segmentation foundation, banking virtual account management, sd-wan edge, blockchain platform, documaker, communications cloud native core policy, communications cloud native core unified data repository, communications evolved communications application server, communications pricing design center, autovue for agile product lifecycle management, communications offline mediation controller, banking treasury managementDiscoveredDec 17, 2020UpdatedAug 25, 2026
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.