[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4fNDaZpgX4fQJiJkOS9E6qb7LtC4BvXDvywbnDzXr4c":3,"g5a-ex:oracle\u002Fcommunications_contacts_server@*":116,"g5a-family:oracle\u002Fcommunications_contacts_server":118},{"success":4,"data":5},true,{"product":6,"versions":30,"topVulnerabilitiesByEpss":36,"kevVulnerabilities":93,"seoMetadata":94,"meta":113},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":29},"oracle","communications_contacts_server",5,22,0,"2021-07-21",[14,18,20,23,26],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"8.0",2,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"8.0.0.3.0",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"8.0.0.4.0",12,{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"8.0.0.5.0",16,{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},"8.0.0.6.0",1,"Communications Contacts Server by Oracle is a technology product with 5 tracked versions and 22 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[31,32,33,34,35],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},[37,45,49,56,61,68,72,78,83,88],{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":44},"CVE-2020-9548","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).","2020-03-02",9.8,"v3.1","Critical",0.18921,{"cveId":46,"description":47,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":48},"CVE-2020-9547","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).",0.18383,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":42,"severity":54,"isKev":17,"epssScore":55},"CVE-2021-29425","In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"\u002F\u002F..\u002Ffoo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.","2021-04-13",4.8,"Medium",0.10549,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":60},"CVE-2019-20330","FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.","2020-01-03",0.0864,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":42,"severity":66,"isKev":17,"epssScore":67},"CVE-2020-14060","FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache\u002Fdrill).","2020-06-14",8.1,"High",0.08537,{"cveId":69,"description":70,"publishedDate":64,"cvssScore":65,"cvssVersion":42,"severity":66,"isKev":17,"epssScore":71},"CVE-2020-14062","FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).",0.08108,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":42,"severity":66,"isKev":17,"epssScore":77},"CVE-2020-10673","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).","2020-03-18",8.8,0.08028,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":65,"cvssVersion":42,"severity":66,"isKev":17,"epssScore":82},"CVE-2020-24616","FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).","2020-08-25",0.07552,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":65,"cvssVersion":42,"severity":66,"isKev":17,"epssScore":87},"CVE-2020-24750","FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.","2020-09-17",0.07327,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":76,"cvssVersion":42,"severity":66,"isKev":17,"epssScore":92},"CVE-2020-11113","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).","2020-03-31",0.06278,[],{"title":95,"metaDescription":96,"keywords":97,"structuredData":98},"Communications Contacts Server by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Contacts Server by Oracle covering 5 versions with 22 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Contacts Server vulnerabilities, Communications Contacts Server security, Communications Contacts Server CVE, Oracle Communications Contacts Server, Communications Contacts Server threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":99,"@type":100,"name":101,"description":96,"url":102,"manufacturer":103,"applicationCategory":107,"softwareVersion":108,"mainEntity":109},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Contacts Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_contacts_server",{"@type":104,"name":105,"url":106},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","5 versions tracked",{"@type":110,"name":111,"description":112,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Contacts Server Security Vulnerabilities","Security vulnerabilities affecting Communications Contacts Server by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":114,"apiVersion":115},"2026-10-17T12:43:18.045Z","3.0",{"rows":117,"total":11,"capped":17,"failed":11},[],[]]