FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
29BC94E0-FEBC-4E86-825C-0101DC339852
2.7.9.7
2.7.0
cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
04F30C23-46F8-4F58-807B-002C5E96B7F7
2.8.11.6
2.8.0
cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
77F8EDB1-5890-4054-84FF-2034C7D2ED96
2.9.10.4
2.9.0
OR
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43
OR
cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*
E94F7F59-1785-493F-91A7-5F5EA5E87E4D
OR
cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*
C650FEDB-E903-4C2D-AD40-282AB5F2E3C2
cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*
97994257-C9A4-4491-B362-E8B25B7187AB
cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:*
BBE7BF09-B89C-4590-821E-6C0587E096B5
cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:*:*
ADAE8A71-0BCD-42D5-B38C-9B2A27CC1E6B
cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:*
E7231D2D-4092-44F3-B60A-D7C9ED78AFDF
cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:*
F7BDFC10-45A0-46D8-AB92-4A5E2C1C76ED
cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:*
18127694-109C-4E7E-AE79-0BA351849291
cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:*
33F68878-BC19-4DB8-8A72-BD9FE3D0ACEC
cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:*
5343F8F8-E8B4-49E9-A304-9C8A608B8027
2.9.0
2.4.0
cpe:2.3:a:oracle:communications_calendar_server:8.0.0.4.0:*:*:*:*:*:*:*
46059231-E7F6-4402-8119-1C7FE4ABEA96
cpe:2.3:a:oracle:communications_contacts_server:8.0.0.4.0:*:*:*:*:*:*:*
113E281E-977E-4195-B131-B7C7A2933B6E
cpe:2.3:a:oracle:communications_contacts_server:8.0.0.5.0:*:*:*:*:*:*:*
D01A0BBC-DA0E-4AFE-83BF-4F3BA01653EC
cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*
526E2FE5-263F-416F-8628-6CD40B865780
8.2.2
8.0.0
cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*
B51F78F4-8D7E-48C2-86D1-D53A6EB348A7
8.2.2
8.2.0
cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1:*:*:*:*:*:*:*
987811D5-DA5E-493D-8709-F9231A84E5F9
cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.4.0:*:*:*:*:*:*:*
0DB23B9A-571E-4B77-B432-23F3DC9B67D1
cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*
2AB443D1-D8E0-4253-9E1C-B62AEBBE582A
12.0.3
12.0.0
cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*
ECC00750-1DBF-401F-886E-E0E65A277409
cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*
3E5416A1-EE58-415D-9645-B6A875EBAED2
8.2.2
8.2.0
cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*
11B0C37E-D7C7-45F2-A8D8-5A3B1B191430
8.2.2
8.2.0
cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0:*:*:*:*:*:*:*
7582B307-3899-4BBB-B868-BC912A4D0109
cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*
D26F3E23-F1A9-45E7-9E5F-0C0A24EE3783
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*
021014B2-DC51-481C-BCFE-5857EFBDEDDA
8.1.0
8.0.6
cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.6:*:*:*:*:*:*:*
37C8EE84-A840-4132-B331-C7D450B1FBBF
cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.7:*:*:*:*:*:*:*
1D8436A2-9CA3-4C91-B632-9B03368ABC1B
cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0:*:*:*:*:*:*:*
A00142E6-EEB3-44BD-AB0D-0E5C5640557F
cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:8.0.6:*:*:*:*:*:*:*
4A01F8ED-64DA-43BC-9C02-488010BCD0F4
cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:8.0.7:*:*:*:*:*:*:*
75638A6A-88B2-4BC7-84EA-1CF5FC30D555
cpe:2.3:a:oracle:financial_services_retail_customer_analytics:8.0.6:*:*:*:*:*:*:*
1FBF422E-3F67-4599-A7C1-0E2E4224553A
cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*
A8200D5C-D3C7-4936-84A7-37864DEEC62B
12.2.0.1.20
cpe:2.3:a:oracle:insurance_policy_administration_j2ee:11.0.2.25:*:*:*:*:*:*:*
72F28CE3-F835-4458-8D70-CBE9FC2F7E7A
cpe:2.3:a:oracle:insurance_policy_administration_j2ee:11.1.0.15:*:*:*:*:*:*:*
9F058FDA-04BC-4F32-830D-206983770692
cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:*
6E46AE88-E9F8-41CB-B15F-12F5127A1E8D
9.2.4.2
cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*
A3D635AE-5E4A-47FB-9FCA-D82D52A61367
9.2.4.2
cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*
08FA59A8-6A62-4B33-8952-D6E658F8DAC9
17.12
17.7
cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*
D55A54FD-7DD1-49CD-BE81-0BE73990943C
cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*
82EB08C0-2D46-4635-88DF-E54F6452D3A3
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
202AD518-2E9B-4062-B063-9858AE1F9CE2
cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*
10864586-270E-4ACF-BDCC-ECFCD299305F
cpe:2.3:a:oracle:retail_merchandising_system:15.0:*:*:*:*:*:*:*
792DF04A-2D1B-40B5-B960-3E7152732EB8
cpe:2.3:a:oracle:retail_sales_audit:14.1:*:*:*:*:*:*:*
7DA6E92C-AC3B-40CF-96AE-22CD8769886F
cpe:2.3:a:oracle:retail_service_backbone:14.1:*:*:*:*:*:*:*
378A6656-252B-4929-83EA-BC107FDFD357
cpe:2.3:a:oracle:retail_service_backbone:15.0:*:*:*:*:*:*:*
363395FA-C296-4B2B-9D6F-BCB8DBE6FACE
cpe:2.3:a:oracle:retail_service_backbone:16.0:*:*:*:*:*:*:*
F62A2144-5EF8-4319-B8C2-D7975F51E5FA
cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*
11DA6839-849D-4CEF-85F3-38FE75E07183
cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:*
BCE78490-A4BE-40BD-8C72-0A4526BBD4A4
cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:*
55AE3629-4A66-49E4-A33D-6D81CC94962F
cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0:*:*:*:*:*:*:*
4CB39A1A-AD29-45DD-9EB5-5E2053A01B9A
cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0:*:*:*:*:*:*:*
27C26705-6D1F-4D5E-B64D-B479108154FF
cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*
F14A818F-AA16-4438-A3E4-E64C9287AC66
cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*
4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418
OR
Another  gadget type reported regarding a class in `javax.swing` package..
See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 for description of the general problem.

Mitre id: CVE-2020-10969
Reporters: threedr3am

Fix will be included in:

* 2.9.10.4
* 2.8.11.6 (`jackson-bom` version `2.8.11.20200310`)
* 2.7.9.7
* Does not affect 2.10.0 and later

Block one more gadget type (javax.swing, CVE-2020-10969)
This is a GitHub Issue
repo:jackson-databind
owner:FasterXML
Title : Block one more gadget type (javax.swing, CVE-2020-10969)
Issue date:

--- start body ---
Another  gadget type reported regarding a class in `javax.swing` package..
See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 for description of the general problem.

Mitre id: CVE-2020-10969
Reporters: threedr3am

Fix will be included in:

* 2.9.10.4
* 2.8.11.6 (`jackson-bom` version `2.8.11.20200310`)
* 2.7.9.7
* Does not affect 2.10.0 and later

--- end body ---

comments :
--- start comments ---

--- end comments ---