High · published December 18, 2020
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.
| Product | Versions | Fixed in |
|---|---|---|
| fasterxml/jackson-databind | ≥ 2.0.0, < 2.9.10.8 | 2.9.10.8 |
| netapp/service_level_manager | all versions | — |
| debian/debian_linux | all versions | — |
| oracle/agile_product_lifecycle_management | all versions | — |
| oracle/application_testing_suite | all versions | — |
| oracle/autovue_for_agile_product_lifecycle_management | all versions | — |
| oracle/banking_platform | all versions | — |
| oracle/banking_platform | all versions | — |
| oracle/banking_platform | all versions | — |
| oracle/banking_platform | all versions | — |
| oracle/banking_platform | all versions | — |
| oracle/banking_platform | all versions | — |
| oracle/banking_treasury_management | all versions | — |
| oracle/banking_virtual_account_management | all versions | — |
| oracle/banking_virtual_account_management | all versions | — |
| oracle/banking_virtual_account_management | all versions | — |
| oracle/blockchain_platform | ≤ 21.1.2 | — |
| oracle/communications_cloud_native_core_policy | all versions | — |
| oracle/communications_cloud_native_core_unified_data_repository | all versions | — |
| oracle/communications_diameter_signaling_router | ≥ 8.0.0, ≤ 8.5.0 | — |
| oracle/communications_evolved_communications_application_server | all versions | — |
| oracle/communications_instant_messaging_server | all versions | — |
| oracle/communications_interactive_session_recorder | all versions | — |
| oracle/communications_interactive_session_recorder | all versions | — |
| oracle/communications_offline_mediation_controller | all versions | — |
| oracle/communications_pricing_design_center | all versions | — |
| oracle/communications_services_gatekeeper | all versions | — |
| oracle/communications_unified_inventory_management | all versions | — |
| oracle/documaker | all versions | — |
| oracle/documaker | all versions | — |
| oracle/insurance_policy_administration_j2ee | all versions | — |
| oracle/retail_merchandising_system | all versions | — |
| oracle/retail_xstore_point_of_service | all versions | — |
| oracle/retail_xstore_point_of_service | all versions | — |
| oracle/retail_xstore_point_of_service | all versions | — |
| oracle/retail_xstore_point_of_service | all versions | — |
| oracle/webcenter_portal | all versions | — |
| oracle/webcenter_portal | all versions | — |