FasterXML jackson-databind 2.x prior to 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
fasterxml jackson-databind |
||
netapp active iq unified manager - |
||
oracle application testing suite 13.3.0.1 |
||
oracle agile plm 9.3.6 |
||
oracle communications policy management 12.5.0 |
||
oracle communications diameter signaling router |
||
oracle communications services gatekeeper 7.0 |
||
oracle communications evolved communications application server 7.1 |
||
oracle communications contacts server 8.0.0.5.0 |
||
oracle communications calendar server 8.0.0.4.0 |
||
oracle communications unified inventory management 7.4.1 |
||
oracle communications cloud native core unified data repository 1.4.0 |
||
oracle communications element manager |
||
oracle autovue for agile product lifecycle management 21.0.2 |
||
oracle communications messaging server 8.1 |
||
oracle siebel ui framework |
||
oracle banking supply chain finance 14.2 |
||
oracle banking supply chain finance 14.3 |
||
oracle banking supply chain finance 14.5 |
||
oracle identity manager connector 11.1.1.5.0 |
||
oracle communications contacts server 8.0 |
||
oracle communications calendar server 8.0 |
||
oracle banking liquidity management 14.3 |
||
oracle banking liquidity management 14.5 |
||
oracle banking liquidity management 14.2 |
||
oracle communications session report manager |
||
oracle communications pricing design center 12.0.0.4.0 |
||
oracle communications instant messaging server 10.0.1.5.0 |
||
oracle communications offline mediation controller 12.0.0.3 |
||
oracle blockchain platform |
||
debian debian linux 9.0 |
Vulmon