AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2020-9546.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSCRITICAL / 9.8CVSS 3.1 · nvd@nist.gov
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 07, 2026

Disclosure summary

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).

Source-reported weakness categories

CWE-502

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2020-9546

Open original source · Updated Oct 07, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
fasterxmljackson-databind* {"versionStartIncluding":"2.9.0","versionEndExcluding":"2.9.10.4"}
netappactive_iq_unified_manager* {"versionStartIncluding":"7.3"}
netappactive_iq_unified_manager* {"versionStartIncluding":"7.3"}
netappactive_iq_unified_manager* {"versionStartIncluding":"9.5"}
debiandebian_linux8.0
oracleagile_product_lifecycle_management9.3.6
oracleautovue_for_agile_product_lifecycle_management21.0.2
oraclebanking_digital_experience18.1
oraclebanking_digital_experience18.2
oraclebanking_digital_experience18.3
oraclebanking_digital_experience19.1
oraclebanking_digital_experience19.2
oraclebanking_digital_experience20.1
oraclebanking_platform* {"versionStartIncluding":"2.4.0","versionEndIncluding":"2.9.0"}
oraclecommunications_calendar_server8.0.0.4.0
oraclecommunications_contacts_server8.0.0.4.0
oraclecommunications_contacts_server8.0.0.5.0
oraclecommunications_diameter_signaling_router* {"versionStartIncluding":"8.0.0","versionEndIncluding":"8.2.2"}
oraclecommunications_element_manager* {"versionStartIncluding":"8.2.0","versionEndIncluding":"8.2.2"}
oraclecommunications_evolved_communications_application_server7.1
oraclecommunications_instant_messaging_server10.0.1.4.0
oraclecommunications_network_charging_and_control* {"versionStartIncluding":"12.0.0","versionEndIncluding":"12.0.3"}
oraclecommunications_network_charging_and_control6.0.1
oraclecommunications_session_report_manager* {"versionStartIncluding":"8.2.0","versionEndIncluding":"8.2.2"}
oraclecommunications_session_route_manager* {"versionStartIncluding":"8.2.0","versionEndIncluding":"8.2.2"}
oracleenterprise_manager_base_platform13.3.0.0
oracleenterprise_manager_base_platform13.4.0.0
oraclefinancial_services_analytical_applications_infrastructure* {"versionStartIncluding":"8.0.6","versionEndIncluding":"8.1.0"}
oraclefinancial_services_institutional_performance_analytics8.0.6
oraclefinancial_services_institutional_performance_analytics8.0.7
oraclefinancial_services_institutional_performance_analytics8.1.0
oraclefinancial_services_institutional_performance_analytics8.7.0
oraclefinancial_services_price_creation_and_discovery8.0.6
oraclefinancial_services_price_creation_and_discovery8.0.7
oraclefinancial_services_retail_customer_analytics8.0.6
oracleglobal_lifecycle_management_opatch* {"versionEndExcluding":"12.2.0.1.20"}
oracleinsurance_policy_administration_j2ee11.0.2.25
oracleinsurance_policy_administration_j2ee11.1.0.15
oraclejd_edwards_enterpriseone_orchestrator* {"versionEndExcluding":"9.2.4.2"}
oraclejd_edwards_enterpriseone_tools* {"versionEndExcluding":"9.2.4.2"}
oracleprimavera_unifier* {"versionStartIncluding":"17.7","versionEndIncluding":"17.12"}
oracleprimavera_unifier16.1
oracleprimavera_unifier16.2
oracleprimavera_unifier18.8
oracleprimavera_unifier19.12
oracleretail_merchandising_system15.0
oracleretail_sales_audit14.1
oracleretail_service_backbone14.1
oracleretail_service_backbone15.0
oracleretail_service_backbone16.0
oracleretail_xstore_point_of_service15.0
oracleretail_xstore_point_of_service16.0
oracleretail_xstore_point_of_service17.0
oracleretail_xstore_point_of_service18.0
oracleretail_xstore_point_of_service19.0
oracleweblogic_server12.2.1.3.0
oracleweblogic_server12.2.1.4.0

Original records & references

PUBLISHED 2020-03-01T23:15:10-05:00
MODIFIED 2026-10-07T17:17:02-04:00
INGESTED 2026-10-08T12:30:34-04:00