[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZXFoyigpNcuUaMFYHS-9trstH0BEbc4Eh156hfDDrmo":3,"g5a-ex:oracle\u002Fglobal_lifecycle_management_opatch@*":117,"g5a-family:oracle\u002Fglobal_lifecycle_management_opatch":119},{"success":4,"data":5},true,{"product":6,"versions":31,"topVulnerabilitiesByEpss":39,"kevVulnerabilities":94,"seoMetadata":95,"meta":114},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":30},"oracle","global_lifecycle_management_opatch",7,25,0,"2022-03-11",[14,18,20,22,24,26,28],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"11.2.0.3.23",1,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"12.2.0.1.0",{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},"12.2.0.1.19",{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},"12.2.0.1.20",{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},"12.2.0.1.22",{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},"13.9.4.0.0",{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},"13.9.4.2.1","Global Lifecycle Management Opatch by Oracle is a technology product with 7 tracked versions and 25 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[32,33,34,35,36,37,38],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},[40,48,53,57,62,69,74,80,84,89],{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":47},"CVE-2020-8840","FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect\u002FJNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.","2020-02-10",9.8,"v3.1","Critical",0.26587,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":52},"CVE-2020-9548","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).","2020-03-02",0.18921,{"cveId":54,"description":55,"publishedDate":51,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":56},"CVE-2020-9547","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).",0.18383,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":61},"CVE-2018-14718","FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.","2019-01-02",0.12679,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":45,"severity":67,"isKev":17,"epssScore":68},"CVE-2022-23437","There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.","2022-01-24",6.5,"Medium",0.11615,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":73},"CVE-2019-14540","A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.","2019-09-15",0.10763,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":45,"severity":79,"isKev":17,"epssScore":73},"CVE-2019-14439","A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.","2019-07-30",7.5,"High",{"cveId":81,"description":82,"publishedDate":60,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":83},"CVE-2018-14719","FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.",0.09682,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":88},"CVE-2019-20330","FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.","2020-01-03",0.0864,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":78,"cvssVersion":45,"severity":79,"isKev":17,"epssScore":93},"CVE-2018-1320","Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","2019-01-07",0.08188,[],{"title":96,"metaDescription":97,"keywords":98,"structuredData":99},"Global Lifecycle Management Opatch by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Global Lifecycle Management Opatch by Oracle covering 7 versions with 25 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Global Lifecycle Management Opatch vulnerabilities, Global Lifecycle Management Opatch security, Global Lifecycle Management Opatch CVE, Oracle Global Lifecycle Management Opatch, Global Lifecycle Management Opatch threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":100,"@type":101,"name":102,"description":97,"url":103,"manufacturer":104,"applicationCategory":108,"softwareVersion":109,"mainEntity":110},"https:\u002F\u002Fschema.org","SoftwareApplication","Global Lifecycle Management Opatch","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fglobal_lifecycle_management_opatch",{"@type":105,"name":106,"url":107},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","7 versions tracked",{"@type":111,"name":112,"description":113,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Global Lifecycle Management Opatch Security Vulnerabilities","Security vulnerabilities affecting Global Lifecycle Management Opatch by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":115,"apiVersion":116},"2026-10-17T12:49:44.792Z","3.0",{"rows":118,"total":11,"capped":17,"failed":11},[],[]]