FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
fasterxml jackson-databind |
||
debian debian linux 9.0 |
||
netapp service level manager - |
||
oracle webcenter portal 12.2.1.3.0 |
||
oracle application testing suite 13.3.0.1 |
||
oracle primavera unifier |
||
oracle agile plm 9.3.6 |
||
oracle communications policy management 12.5.0 |
||
oracle webcenter portal 12.2.1.4.0 |
||
oracle communications billing and revenue management 12.0.0.3.0 |
||
oracle communications billing and revenue management 7.5.0.23.0 |
||
oracle communications services gatekeeper 7.0 |
||
oracle retail merchandising system 15.0.3 |
||
oracle communications evolved communications application server 7.1 |
||
oracle goldengate application adapters 19.1.0.0.0 |
||
oracle data integrator 12.2.1.4.0 |
||
oracle primavera unifier 20.12 |
||
oracle banking virtual account management 14.3.0 |
||
oracle autovue 21.0.2 |
||
oracle insurance rules palette 11.0.2 |
||
oracle commerce platform |
||
oracle commerce platform 11.2.0 |
||
oracle communications unified inventory management 7.4.1 |
||
oracle retail xstore point of service 16.0.6 |
||
oracle retail xstore point of service 17.0.4 |
||
oracle retail xstore point of service 18.0.3 |
||
oracle retail xstore point of service 19.0.2 |
||
oracle retail service backbone 15.0.3.1 |
||
oracle retail service backbone 14.1.3.2 |
||
oracle jd edwards enterpriseone tools |
||
oracle jd edwards enterpriseone orchestrator |
||
oracle insurance rules palette |
||
oracle insurance policy administration |
||
oracle insurance policy administration 11.0.2 |
||
oracle primavera gateway 20.12.0 |
||
oracle primavera gateway |
||
oracle communications cloud native core unified data repository 1.4.0 |
||
oracle communications network charging and control 12.0.4.0.0 |
||
oracle communications convergent charging controller 12.0.4.0.0 |
||
oracle retail customer management and segmentation foundation |
||
oracle banking virtual account management 14.2.0 |
||
oracle banking virtual account management 14.5.0 |
||
oracle retail service backbone 16.0.3.0 |
||
oracle banking credit facilities process management 14.2 |
||
oracle banking credit facilities process management 14.3 |
||
oracle banking credit facilities process management 14.5 |
||
oracle banking corporate lending process management 14.2 |
||
oracle banking corporate lending process management 14.3 |
||
oracle banking corporate lending process management 14.5 |
||
oracle banking supply chain finance 14.2 |
||
oracle banking supply chain finance 14.3 |
||
oracle banking supply chain finance 14.5 |
||
oracle banking treasury management 14.4 |
||
oracle communications diameter signaling route |
||
oracle communications session route manager |
||
oracle communications session report manager |
||
oracle communications cloud native core policy 1.14.0 |
||
oracle banking extensibility workbench 14.2 |
||
oracle banking extensibility workbench 14.3 |
||
oracle banking extensibility workbench 14.5 |
||
oracle communications element manager |
||
oracle blockchain platform |
Vulmon