diff --git a/parent/pom.xml b/parent/pom.xml
index 251d9647317..76b51f50a0f 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -128,8 +128,8 @@
         <cxf.httpcomponents.client.version>4.5.10</cxf.httpcomponents.client.version>
         <cxf.httpcomponents.core.version.range>[4.3,4.5.0)</cxf.httpcomponents.core.version.range>
         <cxf.httpcomponents.core.version>4.4.12</cxf.httpcomponents.core.version>
-        <cxf.jackson.version>2.10.1</cxf.jackson.version>
-        <cxf.jackson.databind.version>2.10.1</cxf.jackson.databind.version>
+        <cxf.jackson.version>2.9.10</cxf.jackson.version>
+        <cxf.jackson.databind.version>2.9.10.4-redhat-00001</cxf.jackson.databind.version>
         <cxf.jacorb.version>3.9</cxf.jacorb.version>
         <cxf.jaeger.version>0.35.5</cxf.jaeger.version>
         <cxf.james.mim4j.version>0.7.2</cxf.james.mim4j.version>
diff --git a/systests/jaxrs/pom.xml b/systests/jaxrs/pom.xml
index 1bd912d0c0d..9ad3eff4c15 100644
--- a/systests/jaxrs/pom.xml
+++ b/systests/jaxrs/pom.xml
@@ -575,6 +575,10 @@
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-surefire-plugin</artifactId>
                 <configuration>
+                    <systemPropertyVariables>
+                        <!-- ENTESB-12869: This is how polymorphic deserialization (a.k.a. "default typing") can be enabled explicitly -->
+                        <jackson.deserialization.whitelist.packages>org.apache.cxf.systest.jaxrs</jackson.deserialization.whitelist.packages>
+                    </systemPropertyVariables>
                     <argLine>
                         ${cxf.surefire.fork.vmargs}
                     </argLine>