CVE:CVE-2019-20330
CNNVD:CNNVD-202001-054
FasterXML jackson-databind是FasterXML公司的一个基于JAVA可以将XML和JSON等数据格式与JAVA对象进行转换的库。Jackson可以轻松的将Java对象转换成json对象和xml文档，同样也可以将json、xml转换成Java对象。
FasterXML jackson-databind 2.9.10.2之前的2.x版本中存在代码问题漏洞。攻击者可利用该漏洞获取敏感信息，添加或修改数据或造成拒绝服务。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.7.9.7,2.8.11.5,2.9.10.2,and avoid the version [2.7.0,2.7.9.7),[2.8.0,2.8.11.5),[2.9.0,2.9.10.2); Upgrade oracle banking_platform to a higher version than 2.9.0,and avoid the version [2.4.0,2.9.0]; Upgrade oracle communications_billing_and_revenue_management to a higher version than 7.5.0.23.0,12.0.0.3.0,and avoid the version 7.5.0.23.0,12.0.0.3.0; Upgrade oracle communications_cloud_native_core_network_slice_selection_function to a higher version than 1.2.1,and avoid the version 1.2.1; Upgrade oracle communications_contacts_server to a higher version than 8.0.0.4.0,and avoid the version 8.0.0.4.0; Upgrade oracle communications_evolved_communications_application_server to a higher version than 7.1,and avoid the version 7.1; Upgrade oracle communications_instant_messaging_server to a higher version than 10.0.1.4.0,and avoid the version 10.0.1.4.0; Upgrade oracle communications_network_charging_and_control to a higher version than 12.0.3,6.0.1,and avoid the version [12.0.0,12.0.3],6.0.1; Upgrade oracle customer_management_and_segmentation_foundation to a higher version than 18.0,and avoid the version 18.0; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.3.0.0,13.4.0.0,and avoid the version 13.3.0.0,13.4.0.0; Upgrade oracle global_lifecycle_management_opatch to a higher version than 11.2.0.3.23,12.2.0.1.19,13.9.4.2.1,and avoid the version (,11.2.0.3.23),[12.2.0.1.0,12.2.0.1.19),[13.9.4.0.0,13.9.4.2.1); Upgrade oracle goldengate_application_adapters to a higher version than 19.1.0.0.0,and avoid the version 19.1.0.0.0; Upgrade oracle goldengate_stream_analytics to a higher version than 19.1.0.0.1,and avoid the version (,19.1.0.0.1); Upgrade oracle jd_edwards_enterpriseone_orchestrator to a higher version than 9.2.4.2,and avoid the version (,9.2.4.2); Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.4.2,and avoid the version (,9.2.4.2); Upgrade oracle primavera_unifier to a higher version than 17.12,16.1,16.2,18.8,19.12,and avoid the version [17.7,17.12],16.1,16.2,18.8,19.12; Upgrade oracle retail_merchandising_system to a higher version than 15.0.3,16.0.2,16.0.3,and avoid the version 15.0.3,16.0.2,16.0.3; Upgrade oracle retail_sales_audit to a higher version than 14.1,and avoid the version 14.1; Upgrade oracle retail_xstore_point_of_service to a higher version than 15.0,16.0,17.0,18.0,19.0,and avoid the version 15.0,16.0,17.0,18.0,19.0; Upgrade oracle siebel_engineering_-_installer_&_deployment to a higher version than 2.20.5,and avoid the version (,2.20.5]; Upgrade oracle siebel_ui_framework to a higher version than 20.5,and avoid the version (,20.5]; Upgrade oracle trace_file_analyzer to a higher version than 12.2.0.1,18c,19c,and avoid the version 12.2.0.1,18c,19c; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle weblogic_server to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; netapp active_iq_unified_manager avoid the version [7.3,),[9.5,),no fixed version after 7.3,no fixed version after 9.5; Upgrade netapp oncommand_api_services to a higher version than -; Upgrade netapp service_level_manager to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -