CVE:CVE-2020-24750
CNNVD:CNNVD-202009-1066
FasterXML jackson-databind是一个基于JAVA可以将XML和JSON等数据格式与JAVA对象进行转换的库。Jackson可以轻松的将Java对象转换成json对象和xml文档，同样也可以将json、xml转换成Java对象。
FasterXML jackson-databind 2.0系列2.9.10.6之前版本存在代码问题漏洞，该漏洞源于com.pastdev.httpcomponents.configuration.JndiConfiguration。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.9.10.6,and avoid the version [2.9.0,2.9.10.6); Upgrade oracle agile_plm to a higher version than 9.3.6,and avoid the version 9.3.6; Upgrade oracle application_testing_suite to a higher version than 13.3.0.1,and avoid the version 13.3.0.1; Upgrade oracle autovue_for_agile_product_lifecycle_management to a higher version than 21.0.2,and avoid the version 21.0.2; Upgrade oracle banking_corporate_lending_process_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_credit_facilities_process_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_liquidity_management to a higher version than 14.2,14.3,14.5,and avoid the version 14.2,14.3,14.5; Upgrade oracle banking_supply_chain_finance to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2); Upgrade oracle communications_calendar_server to a higher version than 8.0,8.0.0.4.0,and avoid the version 8.0,8.0.0.4.0; Upgrade oracle communications_contacts_server to a higher version than 8.0,8.0.0.5.0,and avoid the version 8.0,8.0.0.5.0; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.2.2,and avoid the version [8.0.0,8.2.2]; Upgrade oracle communications_element_manager to a higher version than 8.2.4.0,and avoid the version [8.2.0,8.2.4.0]; Upgrade oracle communications_instant_messaging_server to a higher version than 10.0.1.5.0,and avoid the version 10.0.1.5.0; Upgrade oracle communications_messaging_server to a higher version than 8.1,and avoid the version 8.1; Upgrade oracle communications_offline_mediation_controller to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle communications_policy_management to a higher version than 12.5.0,and avoid the version 12.5.0; Upgrade oracle communications_pricing_design_center to a higher version than 12.0.0.4.0,and avoid the version 12.0.0.4.0; Upgrade oracle communications_services_gatekeeper to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle communications_session_report_manager to a higher version than 8.2.2.1,and avoid the version [8.0.0.0,8.2.2.1]; Upgrade oracle communications_session_route_manager to a higher version than 8.2.2.1,and avoid the version [8.2.0,8.2.2.1]; Upgrade oracle communications_unified_inventory_management to a higher version than 7.4.1,and avoid the version 7.4.1; Upgrade oracle identity_manager_connector to a higher version than 11.1.1.5.0,and avoid the version 11.1.1.5.0; Upgrade oracle siebel_core_-_server_framework to a higher version than 21.5,and avoid the version (,21.5]; Upgrade oracle siebel_ui_framework to a higher version than 21.2,and avoid the version (,21.2]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0