VULNERABILITY INTELLIGENCE

CVE-2020-10672

CVSS score8.8 HIGH

EPSS probability3.06%

CISA KEVNot currently listed

Published2020-03-18

Last modified2026-08-25

Description

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).