CVE-2020-36179

PoC —

CVSS 3.1

8.1 high

EPSS

21%p97

Published

Jan 7, 2021 (Jan 7, 2021)

Modified

Aug 25, 2026

Description

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.

Vendors: netapp debian oracle fasterxml
Products: cloud backup, service level manager, debian linux, agile product lifecycle management, application testing suite, autovue for agile product lifecycle management, banking corporate lending process management, banking credit facilities process management, banking supply chain finance, banking treasury management, banking virtual account management, blockchain platform
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (20.9%)

In the news0 stories

No ingested article mentions this CVE yet.