CVE-2020-24616

Published: Aug 25, 2020Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).

Affected (33)

Products: Fasterxml: Jackson Databind · Netapp: Active Iq Unified Manager · Oracle: Agile Plm, Application Testing Suite, Autovue For Agile Product Lifecycle Management, Banking Liquidity Management, Banking Supply Chain Finance, Blockchain Platform, Communications Calendar Server, Communications Cloud Native Core Unified Data Repository, Communications Contacts Server, Communications Diameter Signaling Router, Communications Element Manager, Communications Evolved Communications Application Server, Communications Instant Messaging Server, Communications Messaging Server, Communications Offline Mediation Controller, Communications Policy Management, Communications Pricing Design Center, Communications Services Gatekeeper, Communications Session Report Manager, Communications Unified Inventory Management, Identity Manager Connector, Siebel Ui Framework · +1 more

Show all products

Fasterxml: Jackson Databind · Netapp: Active Iq Unified Manager · Oracle: Agile Plm, Application Testing Suite, Autovue For Agile Product Lifecycle Management, Banking Liquidity Management, Banking Supply Chain Finance, Blockchain Platform, Communications Calendar Server, Communications Cloud Native Core Unified Data Repository, Communications Contacts Server, Communications Diameter Signaling Router, Communications Element Manager, Communications Evolved Communications Application Server, Communications Instant Messaging Server, Communications Messaging Server, Communications Offline Mediation Controller, Communications Policy Management, Communications Pricing Design Center, Communications Services Gatekeeper, Communications Session Report Manager, Communications Unified Inventory Management, Identity Manager Connector, Siebel Ui Framework · Debian: Debian Linux

Fasterxml

1 product

Jackson Databind

Netapp

1 product

Active Iq Unified Manager

Oracle

22 products

Agile Plm

Application Testing Suite

Autovue For Agile Product Lifecycle Management

Banking Liquidity Management

Banking Supply Chain Finance

Blockchain Platform

Communications Calendar Server

Communications Cloud Native Core Unified Data Repository

Communications Contacts Server

Communications Diameter Signaling Router

Communications Element Manager

Communications Evolved Communications Application Server

Communications Instant Messaging Server

Communications Messaging Server

Communications Offline Mediation Controller

Communications Policy Management

Communications Pricing Design Center

Communications Services Gatekeeper

Communications Session Report Manager

Communications Unified Inventory Management

Identity Manager Connector

Siebel Ui Framework

Debian

1 product

Debian Linux

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Fasterxml Jackson Databind	From 2.0.0 to 2.9.10.6

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Active Iq Unified Manager	All versions
Netapp Active Iq Unified Manager	All versions

Configuration C

28 vulnerable

Vulnerable Software	Affected Versions
Oracle Agile Plm	Version 9.3.6
Oracle Application Testing Suite	Version 13.3.0.1
Oracle Autovue For Agile Product Lifecycle Management	Version 21.0.2
Oracle Banking Liquidity Management	Version 14.2
Oracle Banking Liquidity Management	Version 14.3
Oracle Banking Liquidity Management	Version 14.5
Oracle Banking Supply Chain Finance	Version 14.2
Oracle Banking Supply Chain Finance	Version 14.3
Oracle Banking Supply Chain Finance	Version 14.5
Oracle Blockchain Platform	Before 21.1.2
Oracle Communications Calendar Server	Version 8.0.0.4.0
Oracle Communications Calendar Server	Version 8.0
Oracle Communications Cloud Native Core Unified Data Repository	Version 1.4.0
Oracle Communications Contacts Server	Version 8.0.0.5.0
Oracle Communications Contacts Server	Version 8.0
Oracle Communications Diameter Signaling Router	From 8.0.0 to 8.2.2
Oracle Communications Element Manager	From 8.2.0 to 8.2.4.0
Oracle Communications Evolved Communications Application Server	Version 7.1
Oracle Communications Instant Messaging Server	Version 10.0.1.5.0
Oracle Communications Messaging Server	Version 8.1
Oracle Communications Offline Mediation Controller	Version 12.0.0.3
Oracle Communications Policy Management	Version 12.5.0
Oracle Communications Pricing Design Center	Version 12.0.0.4.0
Oracle Communications Services Gatekeeper	Version 7.0
Oracle Communications Session Report Manager	From 8.0.0.0 to 8.2.2.1
Oracle Communications Unified Inventory Management	Version 7.4.1
Oracle Identity Manager Connector	Version 11.1.1.5.0
Oracle Siebel Ui Framework	Up to 21.2