CISA-ADP AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA-ADP CWE-502

OR
     *cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:* versions from (including) 2.0.0 up to (excluding) 2.6.7.5
     *cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:* versions from (including) 2.7.0 up to (excluding) 2.9.10.8

OR
     *cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:* versions from (including) 2.9.0 up to (excluding) 2.9.10.8

OR
     *cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2:

OR
     *cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5:*:*:*:*:*:*:*
     *cpe:2.3:a:orac

https://www.oracle.com/security-alerts/cpujul2022.html No Types Assigned

https://www.oracle.com/security-alerts/cpujul2022.html Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html [No Types Assigned]

OR
     *cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2:

OR
     *cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2:

https://www.oracle.com/security-alerts/cpuapr2022.html No Types Assigned

https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory

https://www.oracle.com/security-alerts/cpuapr2022.html [No Types Assigned]

OR
     *cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2:

OR
     *cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:*

https://github.com/FasterXML/jackson-databind/issues/2998 Patch, Third Party Advisory

https://github.com/FasterXML/jackson-databind/issues/2998 Issue Tracking, Patch, Third Party Advisory

https://www.oracle.com//security-alerts/cpujul2021.html Third Party Advisory

https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html No Types Assigned

https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.html Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html [No Types Assigned]

https://www.oracle.com//security-alerts/cpujul2021.html No Types Assigned

https://www.oracle.com//security-alerts/cpujul2021.html Third Party Advisory

https://www.oracle.com/security-alerts/cpuApr2021.html No Types Assigned

https://www.oracle.com/security-alerts/cpuApr2021.html Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.html No Types Assigned

https://www.oracle.com/security-alerts/cpuoct2021.html Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.html [No Types Assigned]

https://www.oracle.com//security-alerts/cpujul2021.html [No Types Assigned]

https://www.oracle.com/security-alerts/cpuApr2021.html [No Types Assigned]

OR
     *cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

https://github.com/FasterXML/jackson-databind/issues/2998 Third Party Advisory

https://github.com/FasterXML/jackson-databind/issues/2998 Patch, Third Party Advisory

https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html No Types Assigned

https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html Mailing List, Third Party Advisory

https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html [No Types Assigned]

OR
     *cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:* versions from (including) 2.0.0 up to (excluding) 2.9.10.8

OR
     *cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:* versions from (including) 2.9.0 up to (excluding) 2.9.10.8

https://security.netapp.com/advisory/ntap-20210205-0005/ No Types Assigned

https://security.netapp.com/advisory/ntap-20210205-0005/ Third Party Advisory

https://security.netapp.com/advisory/ntap-20210205-0005/ [No Types Assigned]

NIST (AV:N/AC:M/Au:N/C:P/I:P/A:P)

NIST (AV:N/AC:L/Au:N/C:P/I:P/A:P)

NIST AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

OR
     *cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:* versions from (including) 2.0.0 up to (excluding) 2.9.10.8

NIST (AV:N/AC:L/Au:N/C:P/I:P/A:P)

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST CWE-502

https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 No Types Assigned

https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 Exploit, Technical Description, Third Party Advisory

https://github.com/FasterXML/jackson-databind/issues/2998 No Types Assigned

https://github.com/FasterXML/jackson-databind/issues/2998 Third Party Advisory