CVE:CVE-2020-10673
CNNVD:CNNVD-202003-1151
FasterXML jackson-databind是一个基于JAVA可以将XML和JSON等数据格式与JAVA对象进行转换的库。Jackson可以轻松的将Java对象转换成json对象和xml文档，同样也可以将json、xml转换成Java对象。
FasterXML jackson-databind 2.9.10.4之前的2.x版本中存在安全漏洞，该漏洞源于com.caucho.config.types.ResourceRef（caucho-quercus）进行了不安全的反序列化。远程攻击者可借助特制的输入利用该漏洞在系统上执行任意代码。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.6.7.4,2.9.10.4,and avoid the version [2.6.0,2.6.7.4),[2.9.0,2.9.10.4); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade oracle agile_plm to a higher version than 9.3.6,and avoid the version 9.3.6; Upgrade oracle autovue_for_agile_product_lifecycle_management to a higher version than 21.0.2,and avoid the version 21.0.2; Upgrade oracle banking_digital_experience to a higher version than 18.1,18.2,18.3,19.1,19.2,20.1,and avoid the version 18.1,18.2,18.3,19.1,19.2,20.1; Upgrade oracle banking_platform to a higher version than 2.9.0,and avoid the version [2.4.0,2.9.0]; Upgrade oracle communications_calendar_server to a higher version than 8.0.0.4.0,and avoid the version 8.0.0.4.0; Upgrade oracle communications_contacts_server to a higher version than 8.0.0.4.0,8.0.0.5.0,and avoid the version 8.0.0.4.0,8.0.0.5.0; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.2.2,and avoid the version [8.0.0,8.2.2]; Upgrade oracle communications_element_manager to a higher version than 8.2.2,and avoid the version [8.2.0,8.2.2]; Upgrade oracle communications_evolved_communications_application_server to a higher version than 7.1,and avoid the version 7.1; Upgrade oracle communications_instant_messaging_server to a higher version than 10.0.1.4.0,and avoid the version 10.0.1.4.0; Upgrade oracle communications_network_charging_and_control to a higher version than 12.0.3,6.0.1,and avoid the version [12.0.0,12.0.3],6.0.1; Upgrade oracle communications_session_report_manager to a higher version than 8.2.2,and avoid the version [8.2.0,8.2.2]; Upgrade oracle communications_session_route_manager to a higher version than 8.2.2,and avoid the version [8.2.0,8.2.2]; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.3.0.0,13.4.0.0,and avoid the version 13.3.0.0,13.4.0.0; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.1.0,and avoid the version [8.0.6,8.1.0]; Upgrade oracle financial_services_institutional_performance_analytics to a higher version than 8.0.6,8.0.7,8.1.0,and avoid the version 8.0.6,8.0.7,8.1.0; Upgrade oracle financial_services_price_creation_and_discovery to a higher version than 8.0.6,8.0.7,and avoid the version 8.0.6,8.0.7; Upgrade oracle financial_services_retail_customer_analytics to a higher version than 8.0.6,and avoid the version 8.0.6; Upgrade oracle global_lifecycle_management_opatch to a higher version than 12.2.0.1.20,and avoid the version (,12.2.0.1.20); Upgrade oracle insurance_policy_administration_j2ee to a higher version than 11.0.2.25,11.1.0.15,and avoid the version 11.0.2.25,11.1.0.15; Upgrade oracle jd_edwards_enterpriseone_orchestrator to a higher version than 9.2.4.2,and avoid the version (,9.2.4.2); Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.4.2,and avoid the version (,9.2.4.2); Upgrade oracle primavera_unifier to a higher version than 17.12,16.1,16.2,18.8,19.12,and avoid the version [17.7,17.12],16.1,16.2,18.8,19.12; Upgrade oracle retail_merchandising_system to a higher version than 15.0,and avoid the version 15.0; Upgrade oracle retail_sales_audit to a higher version than 14.1,and avoid the version 14.1; Upgrade oracle retail_service_backbone to a higher version than 14.1,15.0,16.0,and avoid the version 14.1,15.0,16.0; Upgrade oracle retail_xstore_point_of_service to a higher version than 15.0,16.0,17.0,18.0,19.0,and avoid the version 15.0,16.0,17.0,18.0,19.0; Upgrade oracle weblogic_server to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0