CVE:CVE-2020-25649
CNNVD:CNNVD-202010-622
Fasterxml FasterXML Jackson是美国FasterXML（Fasterxml）公司的一款适用于Java的数据处理工具。
FasterXML Jackson Databind存在代码问题漏洞，攻击者可利用该漏洞可以将恶意的XML数据传输到FasterXML Jackson Databind，以读取文件、扫描站点或触发拒绝服务。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.6.7.4,2.9.10.7,2.10.5.1,and avoid the version [2.6.0,2.6.7.4),[2.9.0,2.9.10.7),[2.10.0,2.10.5.1); Upgrade netapp oncommand_api_services to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp service_level_manager to a higher version than -; Upgrade fedoraproject fedora to a higher version than 32,and avoid the version 32; Upgrade quarkus quarkus to a higher version than 1.6.1,and avoid the version (,1.6.1]; Upgrade apache iotdb to a higher version than 0.12.0,and avoid the version (,0.12.0); Upgrade oracle agile_plm to a higher version than 9.3.6,and avoid the version 9.3.6; Upgrade oracle agile_product_lifecycle_management_integration_pack to a higher version than 3.6,and avoid the version 3.6; Upgrade oracle banking_apis to a higher version than 18.3,19.1,19.2,20.1,21.1,and avoid the version [18.1,18.3],19.1,19.2,20.1,21.1; Upgrade oracle banking_platform to a higher version than 2.6.2,2.7.0,2.7.1,2.8.0,2.9.0,2.10.0,and avoid the version 2.6.2,2.7.0,2.7.1,2.8.0,2.9.0,2.10.0; Upgrade oracle banking_treasury_management to a higher version than 4.4,and avoid the version 4.4; Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2); Upgrade oracle coherence to a higher version than 12.2.1.4.0,14.1.1.0.0,and avoid the version 12.2.1.4.0,14.1.1.0.0; Upgrade oracle commerce_platform to a higher version than 11.3.2,11.2.0,and avoid the version [11.3.0,11.3.2],11.2.0; Upgrade oracle communications_billing_and_revenue_management to a higher version than 7.5.0.23.0,12.0.0.3.0,and avoid the version 7.5.0.23.0,12.0.0.3.0; Upgrade oracle communications_cloud_native_core_unified_data_repository to a higher version than 1.4.0,and avoid the version 1.4.0; Upgrade oracle communications_convergent_charging_controller to a higher version than 12.0.4.0.0,and avoid the version 12.0.4.0.0; Upgrade oracle communications_evolved_communications_application_server to a higher version than 7.1,and avoid the version 7.1; Upgrade oracle communications_instant_messaging_server to a higher version than 10.0.1.5.0,and avoid the version 10.0.1.5.0; Upgrade oracle communications_interactive_session_recorder to a higher version than 6.3,6.4,and avoid the version 6.3,6.4; Upgrade oracle communications_network_charging_and_control to a higher version than 12.0.4.0.0,and avoid the version 12.0.4.0.0; Upgrade oracle communications_offline_mediation_controller to a higher version than 12.0.0.3,and avoid the version 12.0.0.3; Upgrade oracle communications_pricing_design_center to a higher version than 12.0.0.4.0,and avoid the version 12.0.0.4.0; Upgrade oracle communications_services_gatekeeper to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle communications_unified_inventory_management to a higher version than 7.4.1,and avoid the version 7.4.1; Upgrade oracle goldengate_application_adapters to a higher version than 19.1.0.0.0,and avoid the version 19.1.0.0.0; Upgrade oracle health_sciences_empirica_signal to a higher version than 9.0,9.1,and avoid the version 9.0,9.1; Upgrade oracle insurance_policy_administration to a higher version than 11.3.0,11.0.2,and avoid the version [11.1.0,11.3.0],11.0.2; Upgrade oracle insurance_rules_palette to a higher version than 11.3.0,11.0.2,and avoid the version [11.1.0,11.3.0],11.0.2; Upgrade oracle jd_edwards_enterpriseone_orchestrator to a higher version than 9.2.5.3,and avoid the version (,9.2.5.3); Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.5.3,and avoid the version (,9.2.5.3); Upgrade oracle primavera_gateway to a higher version than 17.12,17.12.11,18.8.11,19.12.10,20.12.0,and avoid the version [17.7,17.12],[17.12.0,17.12.11],[18.8.0,18.8.11],[19.12.0,19.12.10],20.12.0; Upgrade oracle retail_service_backbone to a higher version than 14.1.3.2,15.0.3.1,16.0.3,and avoid the version 14.1.3.2,15.0.3.1,16.0.3; Upgrade oracle retail_xstore_point_of_service to a higher version than 16.0.6,17.0.4,18.0.3,19.0.2,20.0.1,and avoid the version 16.0.6,17.0.4,18.0.3,19.0.2,20.0.1; Upgrade oracle sd-wan_edge to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle utilities_framework to a higher version than 4.3.0.5.0,4.3.0.6.0,4.4.0.0.0,4.4.0.2.0,4.4.0.3.0,and avoid the version 4.3.0.5.0,4.3.0.6.0,4.4.0.0.0,4.4.0.2.0,4.4.0.3.0; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_messaging_server to a higher version than 8.0.2,8.1,and avoid the version 8.0.2,8.1