CVE-2020-14061 vulnerabilities and exploits

FasterXML jackson-databind 2.x prior to 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnec...

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Netapp Steelstore Cloud Integrated Storage -Debian Debian Linux 8.0 Oracle Agile Plm 9.3.6 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Netapp Steelstore Cloud Integrated Storage -Debian Debian Linux 8.0 Oracle Agile Plm 9.3.6 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Communications Calendar Server 8.0.0.4.0

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Netapp Steelstore Cloud Integrated Storage -Oracle Agile Plm 9.3.6 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.5.0

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).

9.1

CVSSv3

HttpObjectDecoder.java in Netty prior to 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

Netty Netty Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 33 Canonical Ubuntu Linux 18.04 Redhat Jboss Amq Clients 2 Redhat Jboss Enterprise Application Platform 7.2 Redhat Jboss Enterprise Application Platform 7.3 Apache Spark 2.4.7 Apache Spark 2.4.8

8.8

CVSSv3

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks. Versions shipped wit...

Redhat Single Sign-on 7.3 Redhat Jboss Enterprise Application Platform 7.2.0 Redhat Single Sign-on -

9.1

CVSSv3

HttpObjectDecoder.java in Netty prior to 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."

5.4

CVSSv3

A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing general HTTP security headers in HTTP-responses. This does not directly lead to a security issue, yet it might aid attackers in their efforts...

Redhat Keycloak Quarkus Quarkus

8.8

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.

Fasterxml Jackson-databind Debian Debian Linux 8.0 Netapp Steelstore Cloud Integrated Storage -Oracle Agile Plm 9.3.6 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Banking Platform

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.

Fasterxml Jackson-databind Oracle Agile Plm 9.3.6 Oracle Application Testing Suite 13.3.0.1 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Corporate Lending Process Management 14.2.0 Oracle Banking Corporate Lending Process Management 14.3.0 Oracle Banking Corporate Lending Process Management 14.5.0 Oracle Banking Credit Facilities Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.3.0 Oracle Banking Credit Facilities Process Management 14.5.0 Oracle Banking Liquidity Management 14.2 Oracle Banking Liquidity Management 14.3

1 Github repository

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-14061 vulnerabilities and exploits

CVE-2020-14061

CVE-2020-14195

CVE-2020-14060

CVE-2020-14062

CVE-2019-20445

CVE-2019-14843

CVE-2019-20444

CVE-2020-1728

CVE-2020-10969

CVE-2020-24750

Vulmon Search

About

Products

Connect