CVE:CVE-2020-36182
CNNVD:CNNVD-202101-325
FasterXML jackson-databind是一个基于JAVA可以将XML和JSON等数据格式与JAVA对象进行转换的库。Jackson可以轻松的将Java对象转换成json对象和xml文档，同样也可以将json、xml转换成Java对象。
FasterXML jackson-databind 2.x before 2.9.10.8 存在代码问题漏洞，该漏洞源于org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS错误地处理serialization gadgets 和 typing的交互。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.9.10.8,and avoid the version [2.9.0,2.9.10.8); Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp service_level_manager to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle agile_plm to a higher version than 9.3.6,and avoid the version 9.3.6; Upgrade oracle application_testing_suite to a higher version than 13.3.0.1,and avoid the version 13.3.0.1; Upgrade oracle autovue_for_agile_product_lifecycle_management to a higher version than 21.0.2,and avoid the version 21.0.2; Upgrade oracle banking_corporate_lending_process_management to a higher version than 14.2,14.3,14.5,and avoid the version 14.2,14.3,14.5; Upgrade oracle banking_credit_facilities_process_management to a higher version than 14.2,14.3,14.5,and avoid the version 14.2,14.3,14.5; Upgrade oracle banking_extensibility_workbench to a higher version than 14.2,14.3,14.5,and avoid the version 14.2,14.3,14.5; Upgrade oracle banking_supply_chain_finance to a higher version than 14.2,14.3,14.5,and avoid the version 14.2,14.3,14.5; Upgrade oracle banking_treasury_management to a higher version than 4.4,and avoid the version 4.4; Upgrade oracle banking_virtual_account_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2]; Upgrade oracle commerce_platform to a higher version than 11.3.2,11.2.0,and avoid the version [11.3.0,11.3.2],11.2.0; Upgrade oracle communications_billing_and_revenue_management to a higher version than 7.5.0.23.0,12.0.0.3.0,and avoid the version 7.5.0.23.0,12.0.0.3.0; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_cloud_native_core_unified_data_repository to a higher version than 1.4.0,and avoid the version 1.4.0; Upgrade oracle communications_convergent_charging_controller to a higher version than 12.0.4.0.0,and avoid the version 12.0.4.0.0; Upgrade oracle communications_diameter_signaling_route to a higher version than 8.5.0.0,and avoid the version [8.0.0.0,8.5.0.0]; Upgrade oracle communications_element_manager to a higher version than 8.2.4.0,and avoid the version [8.2.0.0,8.2.4.0]; Upgrade oracle communications_evolved_communications_application_server to a higher version than 7.1,and avoid the version 7.1; Upgrade oracle communications_instant_messaging_server to a higher version than 10.0.1.5.0,and avoid the version 10.0.1.5.0; Upgrade oracle communications_network_charging_and_control to a higher version than 12.0.4.0.0,and avoid the version 12.0.4.0.0; Upgrade oracle communications_offline_mediation_controller to a higher version than 12.0.0.3,and avoid the version 12.0.0.3; Upgrade oracle communications_policy_management to a higher version than 12.5.0,and avoid the version 12.5.0; Upgrade oracle communications_pricing_design_center to a higher version than 12.0.0.4.0,and avoid the version 12.0.0.4.0; Upgrade oracle communications_services_gatekeeper to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle communications_session_report_manager to a higher version than 8.2.2.1,and avoid the version [8.0.0.0,8.2.2.1]; Upgrade oracle communications_session_route_manager to a higher version than 8.2.2.1,and avoid the version [8.2.0.0,8.2.2.1]; Upgrade oracle communications_unified_inventory_management to a higher version than 7.4.1,and avoid the version 7.4.1; Upgrade oracle data_integrator to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle documaker to a higher version than 12.6.0,12.6.3,12.6.4,and avoid the version 12.6.0,12.6.3,12.6.4; Upgrade oracle goldengate_application_adapters to a higher version than 19.1.0.0.0,and avoid the version 19.1.0.0.0; Upgrade oracle insurance_policy_administration to a higher version than 11.3.0,11.0.2,and avoid the version [11.1.0,11.3.0],11.0.2; Upgrade oracle insurance_rules_palette to a higher version than 11.3.0,11.0.2,and avoid the version [11.1.0,11.3.0],11.0.2; Upgrade oracle jd_edwards_enterpriseone_orchestrator to a higher version than 9.2.5.3,and avoid the version (,9.2.5.3); Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.5.3,and avoid the version (,9.2.5.3); Upgrade oracle primavera_gateway to a higher version than 17.12.11,18.8.11,19.12.10,20.12.0,and avoid the version [17.12.0,17.12.11],[18.8.0,18.8.11],[19.12.0,19.12.10],20.12.0; Upgrade oracle primavera_unifier to a higher version than 17.12,17.2,18.8,19.12,20.12,and avoid the version [17.7,17.12],17.2,18.8,19.12,20.12; Upgrade oracle retail_customer_management_and_segmentation_foundation to a higher version than 19.0,and avoid the version [16.0,19.0]; Upgrade oracle retail_merchandising_system to a higher version than 15.0.3,and avoid the version 15.0.3; Upgrade oracle retail_service_backbone to a higher version than 14.1.3.2,15.0.3.1,16.0.3.0,and avoid the version 14.1.3.2,15.0.3.1,16.0.3.0; Upgrade oracle retail_xstore_point_of_service to a higher version than 16.0.6,17.0.4,18.0.3,19.0.2,and avoid the version 16.0.6,17.0.4,18.0.3,19.0.2; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0