CVE:CVE-2020-14062
CNNVD:CNNVD-202006-996
FasterXML jackson-databind是一个基于JAVA可以将XML和JSON等数据格式与JAVA对象进行转换的库。Jackson可以轻松的将Java对象转换成json对象和xml文档，同样也可以将json、xml转换成Java对象。
FasterXML jackson-databind 2.9.10.5之前的2.x版本中存在代码问题漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.9.10.5,and avoid the version [2.9.0,2.9.10.5); netapp active_iq_unified_manager avoid the version [7.3,),[9.5,),no fixed version after 7.3,no fixed version after 9.5; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade oracle agile_plm to a higher version than 9.3.6,and avoid the version 9.3.6; Upgrade oracle banking_digital_experience to a higher version than 18.1,18.2,18.3,19.1,19.2,20.1,and avoid the version 18.1,18.2,18.3,19.1,19.2,20.1; Upgrade oracle communications_calendar_server to a higher version than 8.0.0.4.0,and avoid the version 8.0.0.4.0; Upgrade oracle communications_contacts_server to a higher version than 8.0.0.5.0,and avoid the version 8.0.0.5.0; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.2.2,and avoid the version [8.0.0,8.2.2]; Upgrade oracle communications_element_manager to a higher version than 8.2.2,and avoid the version [8.2.0,8.2.2]; Upgrade oracle communications_evolved_communications_application_server to a higher version than 7.1,and avoid the version 7.1; Upgrade oracle communications_session_report_manager to a higher version than 8.2.2,and avoid the version [8.2.0,8.2.2]; Upgrade oracle communications_session_route_manager to a higher version than 8.2.2,and avoid the version [8.2.0,8.2.2]