CVE:CVE-2020-11619
CNNVD:CNNVD-202004-387
FasterXML jackson-databind是一个基于JAVA可以将XML和JSON等数据格式与JAVA对象进行转换的库。Jackson可以轻松的将Java对象转换成json对象和xml文档，同样也可以将json、xml转换成Java对象。
FasterXML jackson-databind 2.9.10.4之前的2.x版本中存在代码问题漏洞。攻击者可借助特制的输入利用该漏洞在系统上执行任意代码。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.9.10.4,and avoid the version [2.9.0,2.9.10.4); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; netapp active_iq_unified_manager avoid the version [7.3,),[9.5,),no fixed version after 7.3,no fixed version after 9.5; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade oracle agile_plm to a higher version than 9.3.6,and avoid the version 9.3.6; Upgrade oracle banking_platform to a higher version than 2.9.0,and avoid the version [2.4.0,2.9.0]; Upgrade oracle communications_calendar_server to a higher version than 8.0.0.4.0,and avoid the version 8.0.0.4.0; Upgrade oracle communications_contacts_server to a higher version than 8.0.0.4.0,8.0.0.5.0,and avoid the version 8.0.0.4.0,8.0.0.5.0; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.2.2,and avoid the version [8.0.0,8.2.2]; Upgrade oracle communications_evolved_communications_application_server to a higher version than 7.1,and avoid the version 7.1; Upgrade oracle communications_instant_messaging_server to a higher version than 10.0.1.4.0,and avoid the version 10.0.1.4.0; Upgrade oracle communications_network_charging_and_control to a higher version than 12.0.3,6.0.1,and avoid the version [12.0.0,12.0.3],6.0.1; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.3.0.0,13.4.0.0,and avoid the version 13.3.0.0,13.4.0.0; Upgrade oracle global_lifecycle_management_opatch to a higher version than 12.2.0.1.20,and avoid the version (,12.2.0.1.20); Upgrade oracle jd_edwards_enterpriseone_orchestrator to a higher version than 9.2.4.2,and avoid the version (,9.2.4.2); Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.4.2,and avoid the version (,9.2.4.2); Upgrade oracle primavera_unifier to a higher version than 17.12,16.1,16.2,18.8,19.12,and avoid the version [17.7,17.12],16.1,16.2,18.8,19.12; Upgrade oracle retail_merchandising_system to a higher version than 15.0,and avoid the version 15.0; Upgrade oracle retail_sales_audit to a higher version than 14.1,and avoid the version 14.1; Upgrade oracle retail_xstore_point_of_service to a higher version than 15.0,16.0,17.0,18.0,19.0,and avoid the version 15.0,16.0,17.0,18.0,19.0; Upgrade oracle weblogic_server to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0