VDB
BDU%3A2021-00772
BDU%3A2021-00772
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Уязвимость компонента org.apache.openjpa.ee.WASRegistryManagedRuntime библиотеки Jackson-databind проекта FasterXML, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
Risk Scores
CVSS 2.0
9.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., ООО «РусБИТех-Астра», Red Hat Inc., Сообщество свободного программного обеспечения, FasterXML, LLC, АО «НТЦ ИТ РОСА», АО «Концерн ВНИИНС» | Primavera Unifier, WebLogic Server, Oracle Retail Merchandising System, Astra Linux Common Edition (запись в едином реестре российских программ №4433), Red Hat Enterprise Linux, Debian GNU/Linux, Retail Xstore Point of Service, Enterprise Manager Base Platform, Financial Services Price Creation and Discovery, Oracle Agile PLM, Oracle Retail Service Backbone, Financial Services Analytical Applications Infrastructure, Oracle Banking Platform, Communications Instant Messaging Server, Jackson-databind, Oracle Communications Contacts Server, Oracle Communications Evolved Communications Application Server, Communications Network Charging and Control, Oracle Retail Sales Audit, A-MQ Clients, Oracle Global Lifecycle Management OPatch, Communications Diameter Signaling Router, Oracle Communications Element Manager, Oracle Communications Session Report Manager, Oracle Communications Session Route Manager, Financial Services Institutional Performance Analytics, Financial Services Retail Customer Analytics, Insurance Policy Administration J2EE, JD Edwards EnterpriseOne Orchestrator, JD Edwards EnterpriseOne Tools, РОСА ХРОМ (запись в едином реестре российских программ №1607), ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) |
Timeline
- Feb 16, 2021 CVE Published
- Mar 5, 2025 CVE Updated
References
- https://www.oracle.com/security-alerts/cpujan2021.html url
- https://www.oracle.com/security-alerts/cpujul2020.html url
- https://www.oracle.com/security-alerts/cpuoct2020.html url
- https://github.com/FasterXML/jackson-databind/issues/2670 url
- https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html url
- https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 url
- https://access.redhat.com/security/cve/cve-2020-11113 url
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2629 url