CVE:CVE-2019-17531
CNNVD:CNNVD-201910-774
FasterXML jackson-databind是FasterXML公司的一个基于JAVA可以将XML和JSON等数据格式与JAVA对象进行转换的库。Jackson可以轻松的将Java对象转换成json对象和xml文档，同样也可以将json、xml转换成Java对象。
FasterXML jackson-databind 2.0.0版本至2.9.10版本中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。攻击者可利用该漏洞执行恶意的payload。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.6.7.3,2.8.11.5,2.9.10.1,and avoid the version [2.6.0,2.6.7.3),[2.8.0,2.8.11.5),[2.9.0,2.9.10.1); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat jboss_enterprise_application_platform to a higher version than 7.2,7.3,and avoid the version 7.2,7.3; Upgrade oracle banking_platform to a higher version than 2.4.0,2.4.1,2.5.0,2.6.0,2.6.1,2.6.2,2.7.0,2.7.1,2.9.0,and avoid the version 2.4.0,2.4.1,2.5.0,2.6.0,2.6.1,2.6.2,2.7.0,2.7.1,2.9.0; Upgrade oracle communications_billing_and_revenue_management to a higher version than 7.5.0.23.0,12.0.0.3.0,and avoid the version 7.5.0.23.0,12.0.0.3.0; Upgrade oracle communications_calendar_server to a higher version than 8.0.0.2.0,8.0.0.3.0,and avoid the version 8.0.0.2.0,8.0.0.3.0; Upgrade oracle communications_cloud_native_core_network_slice_selection_function to a higher version than 1.2.1,and avoid the version 1.2.1; Upgrade oracle communications_evolved_communications_application_server to a higher version than 7.1,and avoid the version 7.1; Upgrade oracle global_lifecycle_management_nextgen_oui_framework to a higher version than 12.2.1.3.0,12.2.1.4.0,13.9.4.2.2,and avoid the version 12.2.1.3.0,12.2.1.4.0,13.9.4.2.2; Upgrade oracle goldengate_application_adapters to a higher version than 19.1.0.0.0,and avoid the version 19.1.0.0.0; Upgrade oracle jd_edwards_enterpriseone_orchestrator to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle primavera_gateway to a higher version than 17.12.6,18.8.8,16.1,16.2,19.12.0,and avoid the version [17.7,17.12.6],[18.8.0,18.8.8],16.1,16.2,19.12.0; Upgrade oracle retail_merchandising_system to a higher version than 15.0.3,16.0.2,16.0.3,and avoid the version 15.0.3,16.0.2,16.0.3; Upgrade oracle retail_sales_audit to a higher version than 14.1,and avoid the version 14.1; Upgrade oracle siebel_engineering_-_installer_&_deployment to a higher version than 2.20.5,and avoid the version (,2.20.5]; Upgrade oracle trace_file_analyzer to a higher version than 12.2.0.1,18c,19c,and avoid the version 12.2.0.1,18c,19c; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle webcenter_sites to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle weblogic_server to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -