CVE-2021-20190

EPSS 0.32%
Veröffentlicht 19.01.2021 17:15:13
Zuletzt bearbeitet 27.08.2025 21:15:36
Quelle secalert@redhat.com
Teams Watchlist Login
Unerledigt Login

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Fasterxml ≫ Jackson-databind Version < 2.6.7.5

Fasterxml ≫ Jackson-databind Version >= 2.7.0 < 2.9.10.7

Netapp ≫ Active Iq Unified Manager Version- SwPlatformlinux

Netapp ≫ Active Iq Unified Manager Version- SwPlatformwindows

Netapp ≫ Oncommand Api Services Version-

Netapp ≫ Oncommand Insight Version-

Netapp ≫ Service Level Manager Version-

Apache ≫ Nifi Version >= 1.7.0 <= 1.12.1

Debian ≫ Debian Linux Version9.0

Oracle ≫ Commerce Guided Search And Experience Manager Version11.3.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.32%	0.549

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	8.3	8.6	8.5	AV:N/AC:M/Au:N/C:P/I:P/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H