CVEvulnerability

CVE-2019-20330

9.8 CRITICAL Published 2020-01-03 Modified 2026-10-08 Official page ↗
Status
Modified
Published
2020-01-03
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-502

Description

FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.

Affected configurations

• fasterxml jackson-databind (>= 2.0.0 < 2.7.9.7) • fasterxml jackson-databind (>= 2.8.0 < 2.8.11.5) • fasterxml jackson-databind (>= 2.9.0 < 2.9.10.2) • oracle banking platform (>= 2.4.0 <= 2.9.0) • oracle communications billing and revenue management 7.5.0.23.0 • oracle communications billing and revenue management 12.0.0.3.0 • oracle communications cloud native core network slice selection function 1.2.1 • oracle communications contacts server 8.0.0.4.0 • oracle communications evolved communications application server 7.1 • oracle communications instant messaging server 10.0.1.4.0 • oracle communications network charging and control (>= 12.0.0 <= 12.0.3) • oracle communications network charging and control 6.0.1 • oracle customer management and segmentation foundation 18.0 • oracle enterprise manager base platform 13.3.0.0 • oracle enterprise manager base platform 13.4.0.0 • oracle global lifecycle management opatch (< 11.2.0.3.23) • oracle global lifecycle management opatch (>= 12.2.0.1.0 < 12.2.0.1.19) • oracle global lifecycle management opatch (>= 13.9.4.0.0 < 13.9.4.2.1) • oracle goldengate application adapters 19.1.0.0.0 • oracle goldengate stream analytics (< 19.1.0.0.1) • oracle jd edwards enterpriseone orchestrator (< 9.2.4.2) • oracle jd edwards enterpriseone tools (< 9.2.4.2) • oracle primavera unifier (>= 17.7 <= 17.12) • oracle primavera unifier 16.1 • oracle primavera unifier 16.2 • oracle primavera unifier 18.8 • oracle primavera unifier 19.12 • oracle retail merchandising system 15.0.3 • oracle retail merchandising system 16.0.2 • oracle retail merchandising system 16.0.3 • oracle retail sales audit 14.1 • oracle retail xstore point of service 15.0 • oracle retail xstore point of service 16.0 • oracle retail xstore point of service 17.0 • oracle retail xstore point of service 18.0 • oracle retail xstore point of service 19.0 • oracle siebel engineering - installer \& deployment (<= 2.20.5) • oracle siebel ui framework (<= 20.5) • oracle trace file analyzer 12.2.0.1 • oracle trace file analyzer 18c • oracle trace file analyzer 19c • oracle webcenter portal 12.2.1.3.0 • oracle webcenter portal 12.2.1.4.0 • oracle weblogic server 12.2.1.3.0 • oracle weblogic server 12.2.1.4.0 • debian debian linux 8.0 • netapp active iq unified manager (>= 7.3) • netapp active iq unified manager (>= 9.5) • netapp oncommand api services • netapp service level manager • netapp snapcenter • netapp steelstore cloud integrated storage

Related

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References