Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
Filtered by product Autovue
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-35728 4 Debian, Fasterxml, Netapp and 1 more 39 Debian Linux, Jackson-databind, Service Level Manager and 36 more 2022-07-25 6.8 MEDIUM 8.1 HIGH
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).