csirt@kutim:~/threat-intel/cve/CVE-2020-36188

Katalog CVE

CVSS 8.1 · High EPSS 8,8%

Kerentanan Deserialization of Untrusted Data pada fasterxml jackson-databind, netapp cloud backup +38 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.

Rincian

Terbit di NVD
6 Januari 2021
Terakhir diubah
8 Oktober 2026
Status NVD
Modified
CVSS 3.1
8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-502: Deserialization of Untrusted Data
EPSS (30 hari)
8,8% peluang dieksploitasi; lebih tinggi dari 95,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
fasterxml jackson-databind Versi 2.0.0 hingga sebelum 2.6.7.5
fasterxml jackson-databind Versi 2.7.0 hingga sebelum 2.9.10.8
netapp cloud backup Semua versi
netapp service level manager Semua versi
debian debian linux Versi 9.0
oracle agile product lifecycle management Versi 9.3.6
oracle application testing suite Versi 13.3.0.1
oracle autovue for agile product lifecycle management Versi 21.0.2
oracle banking corporate lending process management Versi 14.2
oracle banking corporate lending process management Versi 14.3
oracle banking corporate lending process management Versi 14.5
oracle banking credit facilities process management Versi 14.2
oracle banking credit facilities process management Versi 14.3
oracle banking credit facilities process management Versi 14.5
oracle banking extensibility workbench Versi 14.2
oracle banking extensibility workbench Versi 14.3
oracle banking extensibility workbench Versi 14.5
oracle banking supply chain finance Versi 14.2
oracle banking supply chain finance Versi 14.3
oracle banking supply chain finance Versi 14.5
oracle banking treasury management Versi 4.4
oracle banking virtual account management Versi 14.2.0
oracle banking virtual account management Versi 14.3.0
oracle banking virtual account management Versi 14.5.0
oracle blockchain platform Semua versi hingga 21.1.2
oracle commerce platform Versi 11.3.0 hingga 11.3.2
oracle commerce platform Versi 11.2.0
oracle communications billing and revenue management Versi 7.5.0.23.0
oracle communications billing and revenue management Versi 12.0.0.3.0
oracle communications cloud native core policy Versi 1.14.0
oracle communications cloud native core unified data repository Versi 1.4.0
oracle communications convergent charging controller Versi 12.0.4.0.0
oracle communications diameter signaling route Versi 8.0.0.0 hingga 8.5.0.0
oracle communications element manager Versi 8.2.0.0 hingga 8.2.4.0
oracle communications evolved communications application server Versi 7.1
oracle communications instant messaging server Versi 10.0.1.5.0
oracle communications network charging and control Versi 12.0.4.0.0
oracle communications offline mediation controller Versi 12.0.0.3
oracle communications policy management Versi 12.5.0
oracle communications pricing design center Versi 12.0.0.4.0
oracle communications services gatekeeper Versi 7.0
oracle communications session report manager Versi 8.0.0.0 hingga 8.2.2.1
oracle communications session route manager Versi 8.2.0.0 hingga 8.2.2.1
oracle communications unified inventory management Versi 7.4.1
oracle data integrator Versi 12.2.1.4.0
oracle documaker Versi 12.6.0
oracle documaker Versi 12.6.3
oracle documaker Versi 12.6.4
oracle goldengate application adapters Versi 19.1.0.0.0
oracle insurance policy administration Versi 11.1.0 hingga 11.3.0
oracle insurance policy administration Versi 11.0.2
oracle insurance rules palette Versi 11.1.0 hingga 11.3.0
oracle insurance rules palette Versi 11.0.2
oracle jd edwards enterpriseone orchestrator Semua versi sebelum 9.2.5.3
oracle jd edwards enterpriseone tools Semua versi sebelum 9.2.5.3
oracle primavera gateway Versi 17.12.0 hingga 17.12.11
oracle primavera gateway Versi 18.8.0 hingga 18.8.11
oracle primavera gateway Versi 19.12.0 hingga 19.12.10
oracle primavera gateway Versi 20.12.0
oracle primavera unifier Versi 17.7 hingga 17.12

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 75 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 9 Okt 2026, 12:28 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.