Search/CVE-2020-36189
● CVE — High

CVE-2020-36189

Vendordebian, fasterxml, netapp, oracleProductdebian linux, jackson-databind, cloud backup, agile product lifecycle management, banking platform, communications interactive session recorder, communications services gatekeeper, communications billing and revenue management, communications diameter signaling router, communications instant messaging server, service level manager, application testing suite, agile plm, banking virtual account management, communications messaging server, commerce platform, blockchain platform, communications cloud native core policy, communications cloud native core unified data repository, communications evolved communications application server, communications pricing design center, communications network charging and control, autovue for agile product lifecycle management, communications offline mediation controller, banking treasury management, communications convergent charging controllerDiscoveredJan 6, 2021UpdatedAug 25, 2026

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.

CVSS v3.1
8.1 HIGH
EPSS
3.99%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage