CVE:CVE-2020-35490
CNNVD:CNNVD-202012-1285
FasterXML jackson-databind是一个基于JAVA可以将XML和JSON等数据格式与JAVA对象进行转换的库。Jackson可以轻松的将Java对象转换成json对象和xml文档，同样也可以将json、xml转换成Java对象。
FasterXML jackson-databind 2.x before 2.9.10.8 存在代码问题漏洞，该漏洞源于错误地处理了序列化小工具和类型之间的交互，这与org.apache.commons.dbcp2.datasources.PerUserPoolDataSource有关。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.9.10.8,and avoid the version [2.0.0,2.9.10.8); Upgrade netapp service_level_manager to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle agile_plm to a higher version than 9.3.6,and avoid the version 9.3.6; Upgrade oracle application_testing_suite to a higher version than 13.3.0.1,and avoid the version 13.3.0.1; Upgrade oracle autovue_for_agile_product_lifecycle_management to a higher version than 21.0.2,and avoid the version 21.0.2; Upgrade oracle banking_platform to a higher version than 2.6.2,2.7.0,2.7.1,2.8.0,2.9.0,2.10.0,and avoid the version 2.6.2,2.7.0,2.7.1,2.8.0,2.9.0,2.10.0; Upgrade oracle banking_treasury_management to a higher version than 14.4,and avoid the version 14.4; Upgrade oracle banking_virtual_account_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2]; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_cloud_native_core_unified_data_repository to a higher version than 1.4.0,and avoid the version 1.4.0; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.5.0,and avoid the version [8.0.0,8.5.0]; Upgrade oracle communications_evolved_communications_application_server to a higher version than 7.1,and avoid the version 7.1; Upgrade oracle communications_instant_messaging_server to a higher version than 10.0.1.5.0,and avoid the version 10.0.1.5.0; Upgrade oracle communications_interactive_session_recorder to a higher version than 6.3,6.4,and avoid the version 6.3,6.4; Upgrade oracle communications_offline_mediation_controller to a higher version than 12.0.0.3,and avoid the version 12.0.0.3; Upgrade oracle communications_pricing_design_center to a higher version than 12.0.0.4.0,and avoid the version 12.0.0.4.0; Upgrade oracle communications_services_gatekeeper to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle communications_unified_inventory_management to a higher version than 7.4.1,and avoid the version 7.4.1; Upgrade oracle documaker to a higher version than 12.6.3,12.6.4,and avoid the version 12.6.3,12.6.4; Upgrade oracle insurance_policy_administration_j2ee to a higher version than 11.2.0,and avoid the version 11.2.0; Upgrade oracle retail_merchandising_system to a higher version than 15.0.3,and avoid the version 15.0.3; Upgrade oracle retail_xstore_point_of_service to a higher version than 16.0.6,17.0.4,18.0.3,19.0.2,and avoid the version 16.0.6,17.0.4,18.0.3,19.0.2; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0