CVE-2020-24750

Published: Sep 17, 2020Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.

Affected (37)

Products: Fasterxml: Jackson Databind · Oracle: Agile Plm, Application Testing Suite, Autovue For Agile Product Lifecycle Management, Banking Corporate Lending Process Management, Banking Credit Facilities Process Management, Banking Liquidity Management, Banking Supply Chain Finance, Blockchain Platform, Communications Calendar Server, Communications Contacts Server, Communications Diameter Signaling Router, Communications Element Manager, Communications Instant Messaging Server, Communications Messaging Server, Communications Offline Mediation Controller, Communications Policy Management, Communications Pricing Design Center, Communications Services Gatekeeper, Communications Session Report Manager, Communications Session Route Manager, Communications Unified Inventory Management, Identity Manager Connector, Siebel Core Server Framework, Siebel Ui Framework · Debian: Debian Linux

1 product

24 products

Application Testing Suite

Autovue For Agile Product Lifecycle Management

Banking Corporate Lending Process Management

Banking Credit Facilities Process Management

Banking Liquidity Management

Banking Supply Chain Finance

Blockchain Platform

Communications Calendar Server

Communications Contacts Server

Communications Diameter Signaling Router

Communications Element Manager

Communications Instant Messaging Server

Communications Messaging Server

Communications Offline Mediation Controller

Communications Policy Management

Communications Pricing Design Center

Communications Services Gatekeeper

Communications Session Report Manager

Communications Session Route Manager

Communications Unified Inventory Management

Identity Manager Connector

Siebel Core Server Framework

Siebel Ui Framework

Debian

1 product

Debian Linux

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Fasterxml Jackson Databind	From 2.0.0 to 2.6.7.5
Fasterxml Jackson Databind	From 2.7.0 to 2.9.10.6

Configuration B

34 vulnerable

Vulnerable Software	Affected Versions
Oracle Agile Plm	Version 9.3.6
Oracle Application Testing Suite	Version 13.3.0.1
Oracle Autovue For Agile Product Lifecycle Management	Version 21.0.2
Oracle Banking Corporate Lending Process Management	Version 14.2.0
Oracle Banking Corporate Lending Process Management	Version 14.3.0
Oracle Banking Corporate Lending Process Management	Version 14.5.0
Oracle Banking Credit Facilities Process Management	Version 14.2.0
Oracle Banking Credit Facilities Process Management	Version 14.3.0
Oracle Banking Credit Facilities Process Management	Version 14.5.0
Oracle Banking Liquidity Management	Version 14.2
Oracle Banking Liquidity Management	Version 14.3
Oracle Banking Liquidity Management	Version 14.5
Oracle Banking Supply Chain Finance	Version 14.2.0
Oracle Banking Supply Chain Finance	Version 14.3.0
Oracle Banking Supply Chain Finance	Version 14.5.0
Oracle Blockchain Platform	Before 21.1.2
Oracle Communications Calendar Server	Version 8.0.0.4.0
Oracle Communications Calendar Server	Version 8.0
Oracle Communications Contacts Server	Version 8.0.0.5.0
Oracle Communications Contacts Server	Version 8.0
Oracle Communications Diameter Signaling Router	From 8.0.0 to 8.2.2
Oracle Communications Element Manager	From 8.2.0 to 8.2.4.0
Oracle Communications Instant Messaging Server	Version 10.0.1.5.0
Oracle Communications Messaging Server	Version 8.1
Oracle Communications Offline Mediation Controller	Version 12.0.0.3.0
Oracle Communications Policy Management	Version 12.5.0
Oracle Communications Pricing Design Center	Version 12.0.0.4.0
Oracle Communications Services Gatekeeper	Version 7.0
Oracle Communications Session Report Manager	From 8.0.0.0 to 8.2.2.1
Oracle Communications Session Route Manager	From 8.2.0 to 8.2.2.1
Oracle Communications Unified Inventory Management	Version 7.4.1
Oracle Identity Manager Connector	Version 11.1.1.5.0
Oracle Siebel Core Server Framework	Up to 21.5
Oracle Siebel Ui Framework	Up to 21.2