$ cve CVE-2019-20330 JSON

CVE-2019-20330

9.8

CRITICAL · CVSS 3.1 · EPSS 8.6% (pctl 95)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	8.64% — more likely to be exploited than 95% of all CVEs
Weakness	CWE-502
On CISA KEV	no
Public exploit	none known
Published	2020-01-03
Last modified	2026-06-17

Vendor	Product
debian	debian linux
fasterxml	jackson-databind
netapp	active iq unified manager
netapp	oncommand api services
netapp	service level manager
netapp	snapcenter
netapp	steelstore cloud integrated storage
oracle	banking platform
oracle	communications billing and revenue management
oracle	communications cloud native core network slice selection function
oracle	communications contacts server
oracle	communications evolved communications application server
oracle	communications instant messaging server
oracle	communications network charging and control
oracle	customer management and segmentation foundation
oracle	enterprise manager base platform
oracle	global lifecycle management opatch
oracle	goldengate application adapters
oracle	goldengate stream analytics
oracle	jd edwards enterpriseone orchestrator
oracle	jd edwards enterpriseone tools
oracle	primavera unifier
oracle	retail merchandising system
oracle	retail sales audit
oracle	retail xstore point of service
oracle	siebel engineering - installer \& deployment
oracle	siebel ui framework
oracle	trace file analyzer
oracle	webcenter portal
oracle	weblogic server