EXPOSURES › CVE-2020-9547
CVE-2020-9547
CRITICAL
DETAIL
SourceNVD · cve
Published2020-03-02
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2020-9547 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
NetApp · vendorOracle · vendordebian · vendorfasterxml · vendorWebLogic Server · productactive iq unified manager · productautovue for agile product lifecycle management · productbanking platform · productcommunications contacts server · productcommunications evolved communications application server · productcommunications instant messaging server · productcommunications network charging and control · productdebian linux · productenterprise manager base platform · productglobal lifecycle management opatch · productjackson-databind · productjd edwards enterpriseone orchestrator · productjd edwards enterpriseone tools · productprimavera unifier · productretail xstore point of service · product
DESCRIPTION
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).
SENTIMENT · TRUSTED SOURCES
synthesis
neutral
+0.00
No substantive coverage or sentiment toward Debian found in provided sources.
No substantive coverage or sentiment toward Debian found in provided sources.
No substantive coverage or sentiment toward Debian found in provided sources.
AFFECTED FEDRAMP PRODUCTS · 11
| PRODUCT | STATUS |
|---|---|
| Aconex for Defense Oracle |
Authorized |
| Cloud Insights NetApp |
In Process |
| Federal Managed Cloud Services Oracle |
Authorized |
| Fusion Cloud Oracle |
Authorized |
| Government Cloud - Common Controls Oracle |
Authorized |
| Oracle Cloud Infrastructure-Government Cloud Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) - Moderate Oracle |
In Process |
| Oracle Service Cloud Oracle |
Authorized |
| Oracle Service Cloud (DOD) Oracle |
Authorized |
| Taleo Cloud - U.S. Government Cloud Oracle |
Authorized |