← Back

Global Lifecycle Management Opatch

global_lifecycle_management_opatch

Vendor: Oracle • 25 CVEs

CVEs (25)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-36518
4Debian
FasterxmlNetapp+1 more
36Active Iq Unified Manager
Big Data Spatial And GraphCloud Insights Acquisition Unit+33 more
Aug 27, 2025
Mar 11, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
CVE-2022-23437
3Apache
NetappOracle
29Active Iq Unified Manager
Agile Engineering Data ManagementAgile Plm+26 more
Nov 21, 2024
Jan 24, 2022
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consu...Show more
There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.Show less
CVE-2020-11620
4Debian
FasterxmlNetapp+1 more
18Active Iq Unified Manager
Banking PlatformCommunications Contacts Server+15 more
Nov 21, 2024
Apr 7, 2020
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).
CVE-2020-11619
4Debian
FasterxmlNetapp+1 more
21Active Iq Unified Manager
Agile PlmBanking Platform+18 more
Apr 29, 2026
Apr 7, 2020
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).
CVE-2020-11113
4Debian
FasterxmlNetapp+1 more
32Agile Plm
Autovue For Agile Product Lifecycle ManagementBanking Digital Experience+29 more
Apr 29, 2026
Mar 31, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
CVE-2020-11112
4Debian
FasterxmlNetapp+1 more
31Agile Plm
Autovue For Agile Product Lifecycle ManagementBanking Digital Experience+28 more
Apr 29, 2026
Mar 31, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).
CVE-2020-11111
4Debian
FasterxmlNetapp+1 more
25Agile Plm
Autovue For Agile Product Lifecycle ManagementBanking Digital Experience+22 more
Nov 21, 2024
Mar 31, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms)...Show more
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms).Show less
CVE-2020-10969
4Debian
FasterxmlNetapp+1 more
31Agile Plm
Autovue For Agile Product Lifecycle ManagementBanking Digital Experience+28 more
Nov 21, 2024
Mar 26, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
CVE-2020-10968
4Debian
FasterxmlNetapp+1 more
31Agile Plm
Autovue For Agile Product Lifecycle ManagementBanking Digital Experience+28 more
Nov 21, 2024
Mar 26, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).
CVE-2020-10673
4Debian
FasterxmlNetapp+1 more
31Agile Plm
Autovue For Agile Product Lifecycle ManagementBanking Digital Experience+28 more
Nov 21, 2024
Mar 18, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
CVE-2020-10672
4Debian
FasterxmlNetapp+1 more
31Agile Plm
Autovue For Agile Product Lifecycle ManagementBanking Digital Experience+28 more
Nov 21, 2024
Mar 18, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jm...Show more
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).Show less
CVE-2020-9548
4Debian
FasterxmlNetapp+1 more
25Active Iq Unified Manager
Agile PlmAutovue For Agile Product Lifecycle Management+22 more
Nov 21, 2024
Mar 2, 2020
N/A· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).
CVE-2020-9547
4Debian
FasterxmlNetapp+1 more
16Active Iq Unified Manager
Autovue For Agile Product Lifecycle ManagementBanking Platform+13 more
Nov 21, 2024
Mar 2, 2020
N/A· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).
CVE-2020-9546
4Debian
FasterxmlNetapp+1 more
31Active Iq Unified Manager
Agile PlmAutovue For Agile Product Lifecycle Management+28 more
Apr 29, 2026
Mar 2, 2020
N/A· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).
CVE-2020-8840
5Debian
FasterxmlHuawei+2 more
8Debian Linux
Global Lifecycle Management OpatchJackson Databind+5 more
Nov 21, 2024
Feb 10, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.
CVE-2019-20330
4Debian
FasterxmlNetapp+1 more
30Active Iq Unified Manager
Banking PlatformCommunications Billing And Revenue Management+27 more
Nov 21, 2024
Jan 3, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
CVE-2019-3740
2Dell
Oracle
18Application Performance Management
Bsafe Cert JBsafe Crypto J+15 more
Nov 21, 2024
Sep 18, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulne...Show more
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.Show less
CVE-2019-16335
6Debian
FasterxmlFedoraproject+3 more
17Banking Platform
Customer Management And Segmentation FoundationDebian Linux+14 more
Nov 21, 2024
Sep 15, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
CVE-2019-14540
6Debian
FasterxmlFedoraproject+3 more
19Banking Platform
Customer Management And Segmentation FoundationDebian Linux+16 more
Nov 21, 2024
Sep 15, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
CVE-2019-14439
6Apache
DebianFasterxml+3 more
18Banking Platform
Communications Diameter Signaling RouterCommunications Instant Messaging Server+15 more
Nov 21, 2024
Jul 30, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint...Show more
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.Show less