CVE-2021-20190

EPSS 0.32%
Published 19.01.2021 17:15:13
Last modified 27.08.2025 21:15:36
Source secalert@redhat.com
Teams watchlist Login
Open Login

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Affected products Warnungen 0 Metrics 4 CWE 1 References 9

Data is provided by the National Vulnerability Database (NVD)

Fasterxml ≫ Jackson-databind Version < 2.6.7.5

Fasterxml ≫ Jackson-databind Version >= 2.7.0 < 2.9.10.7

Netapp ≫ Active Iq Unified Manager Version- SwPlatformlinux

Netapp ≫ Active Iq Unified Manager Version- SwPlatformwindows

Netapp ≫ Oncommand Api Services Version-

Netapp ≫ Oncommand Insight Version-

Netapp ≫ Service Level Manager Version-

Apache ≫ Nifi Version >= 1.7.0 <= 1.12.1

Debian ≫ Debian Linux Version9.0

Oracle ≫ Commerce Guided Search And Experience Manager Version11.3.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.32%	0.549

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	8.3	8.6	8.5	AV:N/AC:M/Au:N/C:P/I:P/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H