CVE-2020-14060
—CVSS 3.1
8.1 high
EPSS
9%p95
Published
()
Modified
Description
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).
- Vendors
- fasterxmlnetapporacle
- Products
- jackson-databind, active iq unified manager, steelstore cloud integrated storage, agile product lifecycle management, banking digital experience, communications calendar server, communications contacts server, communications diameter signaling router, communications element manager, communications evolved communications application server, communications session report manager, communications session route manager
- Weakness
- CWE-502
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.