CVE-2020-35491

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• Fasterxml/Jackson Databind

  cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*

  Range: >=2.0.0,<2.9.10.8
• NetApp/Service Level Manager

  cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:*
• Oracle Corporation/Agile Plm

  cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*
• Oracle Corporation/Application Testing Suite

  cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*
• Oracle Corporation/Autovue For Agile Product Lifecycle Management

  cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*
• Oracle Corporation/Banking Platform6 versions

  cpe:2.3:a:oracle:banking_platform:2.10.0:*:*:*:*:*:*:*+ 5 more

  • cpe:2.3:a:oracle:banking_platform:2.10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_platform:2.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_platform:2.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:*
• Oracle Corporation/Banking Treasury Management

  cpe:2.3:a:oracle:banking_treasury_management:14.4:*:*:*:*:*:*:*
• Oracle Corporation/Banking Virtual Account Management3 versions

  cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*
• Oracle Corporation/Blockchain Platform

  cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*

  Range: <=21.1.2
• Oracle Corporation/Communications Cloud Native Core Policy

  cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Cloud Native Core Unified Data Repository

  cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.4.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Diameter Signaling Route2 versions

  cpe:2.3:a:oracle:communications_diameter_signaling_route:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:communications_diameter_signaling_route:*:*:*:*:*:*:*:*range: >=8.0.0.0,<=8.5.0.0
  • cpe:2.3:a:oracle:communications_diameter_signaling_route:-:*:*:*:*:*:*:*
• Oracle Corporation/Communications Evolved Communications Application Server

  cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1:*:*:*:*:*:*:*
• Oracle Corporation/Communications Instant Messaging Server

  cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.5.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Offline Mediation Controller

  cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3:*:*:*:*:*:*:*
• Oracle Corporation/Communications Pricing Design Center

  cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Services Gatekeeper

  cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Unified Inventory Management

  cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*
• Oracle Corporation/Documaker2 versions

  cpe:2.3:a:oracle:documaker:12.6.3:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:documaker:12.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:documaker:12.6.4:*:*:*:*:*:*:*
• Oracle Corporation/Insurance Policy Administration J2ee

  cpe:2.3:a:oracle:insurance_policy_administration_j2ee:11.0.2:*:*:*:*:*:*:*
• Oracle Corporation/Retail Customer Management And Segmentation Foundation

  cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:*:*:*:*:*:*:*:*

  Range: >=16.0,<=19.0
• Oracle Corporation/Retail Merchandising System

  cpe:2.3:a:oracle:retail_merchandising_system:15.0.3:*:*:*:*:*:*:*
• Oracle Corporation/Retail Xstore Point Of Service4 versions

  cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*+ 3 more

  • cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*
• Oracle Corporation/Sd Wan Edge

  cpe:2.3:a:oracle:sd-wan_edge:9.0:*:*:*:*:*:*:*
• Oracle Corporation/Webcenter Portal2 versions

  cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*
• Debian/linux

  cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
• ghsa-coords

  pkg:maven/com.fasterxml.jackson.core/jackson-databind

  Range: >= 2.0.0, < 2.9.10.8

• www.oracle.com//security-alerts/cpujul2021.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpuApr2021.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpuapr2022.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpujan2022.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpuoct2021.htmlnvdPatchThird Party AdvisoryWEB
• cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062nvdExploitTechnical DescriptionThird Party AdvisoryWEB
• github.com/FasterXML/jackson-databind/issues/2986nvdThird Party AdvisoryWEB
• github.com/advisories/GHSA-r3gr-cxrf-hg25ghsaADVISORY
• lists.debian.org/debian-lts-announce/2021/04/msg00025.htmlnvdMailing ListThird Party AdvisoryWEB
• nvd.nist.gov/vuln/detail/CVE-2020-35491ghsaADVISORY
• security.netapp.com/advisory/ntap-20210122-0005/nvdThird Party Advisory
• www.oracle.com/security-alerts/cpujul2022.htmlnvdThird Party AdvisoryWEB
• github.com/FasterXML/jackson-databind/commit/41b8bdb5ccc1d8edb71acf1c8234da235a24249dghsaWEB
• security.netapp.com/advisory/ntap-20210122-0005ghsaWEB

No linked articles in our index yet.