{"api_version":"1","generated_at":"2026-09-12T20:59:30+00:00","cve":"CVE-2020-36186","urls":{"html":"https://cve.report/CVE-2020-36186","api":"https://cve.report/api/cve/CVE-2020-36186.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-36186","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-36186"},"summary":{"title":"CVE-2020-36186","description":"FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.","state":"PUBLISHED","assigner":"mitre","published_at":"2021-01-06 23:15:13","updated_at":"2026-08-25 16:28:27"},"problem_types":["CWE-502","n/a"],"metrics":[{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"8.1","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","name":"https://www.oracle.com/security-alerts/cpuapr2022.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"Oracle Critical Patch Update Advisory - April 2022","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","name":"https://www.oracle.com/security-alerts/cpuoct2021.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"Oracle Critical Patch Update Advisory - October 2021","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","name":"https://www.oracle.com//security-alerts/cpujul2021.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"Oracle Critical Patch Update Advisory - July 2021","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","name":"https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Technical Description","Third Party Advisory"],"title":"On Jackson CVEs: Don’t Panic — Here is what you need to know | by @cowtowncoder | Medium","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://security.netapp.com/advisory/ntap-20210205-0005/","name":"https://security.netapp.com/advisory/ntap-20210205-0005/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"January 2021 FasterXML jackson-databind Vulnerabilities in NetApp Products | NetApp Product Security","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","name":"https://www.oracle.com/security-alerts/cpujan2022.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"Oracle Critical Patch Update Advisory - January 2022","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","name":"https://www.oracle.com/security-alerts/cpujul2022.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Oracle Critical Patch Update Advisory - July 2022","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","name":"https://www.oracle.com/security-alerts/cpuApr2021.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Oracle Critical Patch Update Advisory - April 2021","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","name":"https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[SECURITY] [DLA 2638-1] jackson-databind security update","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://github.com/FasterXML/jackson-databind/issues/2997","name":"https://github.com/FasterXML/jackson-databind/issues/2997","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"title":"Block 2 more gadget types (placeholder) · Issue #2997 · FasterXML/jackson-databind · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36186","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36186","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"36186","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fasterxml","cpe5":"jackson-databind","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2020-36186","qid":"178642","title":"Debian Security Update for jackson-databind (DLA 2638-1)"},{"cve":"CVE-2020-36186","qid":"980038","title":"Java (maven) Security Update for com.fasterxml.jackson.core:jackson-databind (GHSA-v585-23hc-c647)"}]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-04T17:23:09.443Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/FasterXML/jackson-databind/issues/2997"},{"name":"[debian-lts-announce] 20210424 [SECURITY] [DLA 2638-1] jackson-databind security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://security.netapp.com/advisory/ntap-20210205-0005/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpujan2022.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpujul2022.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2022-07-25T16:21:41.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"},{"tags":["x_refsource_MISC"],"url":"https://github.com/FasterXML/jackson-databind/issues/2997"},{"name":"[debian-lts-announce] 20210424 [SECURITY] [DLA 2638-1] jackson-databind security update","tags":["mailing-list","x_refsource_MLIST"],"url":"https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html"},{"tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://security.netapp.com/advisory/ntap-20210205-0005/"},{"tags":["x_refsource_MISC"],"url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpujan2022.html"},{"tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpujul2022.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2020-36186","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","refsource":"MISC","url":"https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"},{"name":"https://github.com/FasterXML/jackson-databind/issues/2997","refsource":"MISC","url":"https://github.com/FasterXML/jackson-databind/issues/2997"},{"name":"[debian-lts-announce] 20210424 [SECURITY] [DLA 2638-1] jackson-databind security update","refsource":"MLIST","url":"https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html"},{"name":"https://www.oracle.com/security-alerts/cpuApr2021.html","refsource":"MISC","url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"name":"https://security.netapp.com/advisory/ntap-20210205-0005/","refsource":"CONFIRM","url":"https://security.netapp.com/advisory/ntap-20210205-0005/"},{"name":"https://www.oracle.com//security-alerts/cpujul2021.html","refsource":"MISC","url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"name":"https://www.oracle.com/security-alerts/cpuoct2021.html","refsource":"MISC","url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"name":"https://www.oracle.com/security-alerts/cpujan2022.html","refsource":"MISC","url":"https://www.oracle.com/security-alerts/cpujan2022.html"},{"name":"https://www.oracle.com/security-alerts/cpuapr2022.html","refsource":"MISC","url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"name":"https://www.oracle.com/security-alerts/cpujul2022.html","refsource":"MISC","url":"https://www.oracle.com/security-alerts/cpujul2022.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2020-36186","datePublished":"2021-01-06T22:29:51.000Z","dateReserved":"2021-01-06T00:00:00.000Z","dateUpdated":"2024-08-04T17:23:09.443Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2021-01-06 23:15:13","lastModifiedDate":"2026-08-25 16:28:27","problem_types":["CWE-502","n/a"],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.6.7.5","matchCriteriaId":"4892ABAA-57A0-43D3-965C-2D7F4A8A6024"},{"vulnerable":true,"criteria":"cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*","versionStartIncluding":"2.7.0","versionEndExcluding":"2.9.10.8","matchCriteriaId":"EC9CC9C2-396F-408E-B0C4-D02D6D5BBEB8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*","matchCriteriaId":"5C2089EE-5D7F-47EC-8EA5-0F69790564C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:*","matchCriteriaId":"7081652A-D28B-494E-94EF-CA88117F23EE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*","matchCriteriaId":"4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A125E817-F974-4509-872C-B71933F42AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97994257-C9A4-4491-B362-E8B25B7187AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2:*:*:*:*:*:*:*","matchCriteriaId":"55543515-BE87-4D88-8F9B-130FCE792642"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3:*:*:*:*:*:*:*","matchCriteriaId":"0D32FE52-C11F-40F0-943A-4FD1241AA599"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5:*:*:*:*:*:*:*","matchCriteriaId":"6EE231C5-8BF0-48F4-81EF-7186814664CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2:*:*:*:*:*:*:*","matchCriteriaId":"F9284BB0-343D-46DE-B45D-68081BC20225"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3:*:*:*:*:*:*:*","matchCriteriaId":"821A1FAA-6475-4892-97A5-10D434BC2C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5:*:*:*:*:*:*:*","matchCriteriaId":"2AA5FF83-B693-4DAB-B585-0FD641266231"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_extensibility_workbench:14.2:*:*:*:*:*:*:*","matchCriteriaId":"CC5EC524-B98A-4F6A-BF4F-4AE29C30024C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_extensibility_workbench:14.3:*:*:*:*:*:*:*","matchCriteriaId":"ACB82EF9-C41D-48BB-806D-95A114D385A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_extensibility_workbench:14.5:*:*:*:*:*:*:*","matchCriteriaId":"61F0B664-8F04-4E5A-9276-011012EB60A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_supply_chain_finance:14.2:*:*:*:*:*:*:*","matchCriteriaId":"1D99F81D-61BB-4904-BE31-3367D4A98FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_supply_chain_finance:14.3:*:*:*:*:*:*:*","matchCriteriaId":"93866792-1AAE-40AE-84D0-21250A296BE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_supply_chain_finance:14.5:*:*:*:*:*:*:*","matchCriteriaId":"45AB3A29-0994-46F4-8093-B4A9CE0BD95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_treasury_management:4.4:*:*:*:*:*:*:*","matchCriteriaId":"180F3D2A-7E7A-4DE9-9792-942CB3D6B51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D1534C11-E3F5-49F3-8F8D-7C5C90951E69"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D952E04D-DE2D-4AE0-BFE6-7D9B7E55AC80"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1111BCFD-E336-4B31-A87E-76C684AC6DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*","versionEndIncluding":"21.1.2","matchCriteriaId":"2A50522C-E7AC-4F6F-A340-CF6173FA4D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:commerce_platform:*:*:*:*:*:*:*:*","versionStartIncluding":"11.3.0","versionEndIncluding":"11.3.2","matchCriteriaId":"F012E976-E219-46C2-8177-60ED859594BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:commerce_platform:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"21BEF2FC-89B8-4D97-BB3A-C1ECA19D03B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0:*:*:*:*:*:*:*","matchCriteriaId":"790A89FD-6B86-49AE-9B4F-AE7262915E13"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E39D442D-1997-49AF-8B02-5640BE2A26CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*","matchCriteriaId":"4479F76A-4B67-41CC-98C7-C76B81050F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"AB1BC31C-6016-42A8-9517-2FBBC92620CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_convergent_charging_controller:12.0.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4012B512-DB7D-476A-93A6-51054DD6E3D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_diameter_signaling_route:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0.0","versionEndIncluding":"8.5.0.0","matchCriteriaId":"380D91D8-78F6-43F1-A3F5-BAA1752D5E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0.0","versionEndIncluding":"8.2.4.0","matchCriteriaId":"4EDADF5B-3E55-423E-B976-095456404EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1:*:*:*:*:*:*:*","matchCriteriaId":"987811D5-DA5E-493D-8709-F9231A84E5F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C4A94B36-479F-48F2-9B9E-ACEA2589EF48"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_network_charging_and_control:12.0.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"28AD22B9-A037-419C-8D72-8B062E6882FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A23B00C1-878A-4B55-B87B-EFFFA6A5E622"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5312AC7A-3C16-4967-ACA6-317289A749D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A28F42F0-FBDA-4574-AD30-7A04F27FEA3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*","matchCriteriaId":"062E4E7C-55BB-46F3-8B61-5A663B565891"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0.0","versionEndIncluding":"8.2.2.1","matchCriteriaId":"FB3E2625-08F0-4C8E-B43F-831F0290F0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0.0","versionEndIncluding":"8.2.2.1","matchCriteriaId":"F5D870C4-FB9C-406C-9C6F-344670B0B000"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A7637F8B-15F1-42E2-BE18-E1FF7C66587D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9FADE563-5AAA-42FF-B43F-35B20A2386C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:documaker:12.6.0:*:*:*:*:*:*:*","matchCriteriaId":"AE3CF700-5042-4DD5-A4B1-53A6C4D8E549"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:documaker:12.6.3:*:*:*:*:*:*:*","matchCriteriaId":"34019365-E6E3-4DBC-89EA-5783A29B61B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:documaker:12.6.4:*:*:*:*:*:*:*","matchCriteriaId":"3A1427F8-50F3-45B2-8836-A80ADA70F431"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:goldengate_application_adapters:19.1.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E7BE0590-31BD-4FCD-B50E-A5F86196F99E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:insurance_policy_administration:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndIncluding":"11.3.0","matchCriteriaId":"1DDB3D8B-1D04-4345-BB27-723186719CBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:insurance_policy_administration:11.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0F89EC4B-6D34-40F0-B7C6-C03D03F81C13"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:insurance_rules_palette:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndIncluding":"11.3.0","matchCriteriaId":"5DEAB5CD-4223-4A43-AB9E-486113827A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:insurance_rules_palette:11.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F3E25293-CB03-44CE-A8ED-04B3A0487A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.5.3","matchCriteriaId":"A0A366B8-1B5C-4C9E-A761-1AB1547D7404"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.5.3","matchCriteriaId":"4BCA7DD9-8599-4E43-9D82-999BE15483B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"17.12.0","versionEndIncluding":"17.12.11","matchCriteriaId":"8B1C88FD-C2EC-4C96-AC7E-6F95C8763B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"18.8.0","versionEndIncluding":"18.8.11","matchCriteriaId":"53E2276C-9515-46F6-A621-213A3047B9A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"19.12.0","versionEndIncluding":"19.12.10","matchCriteriaId":"3EF7E2B4-B741-41E9-8EF6-6C415AB9EF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_gateway:20.12.0:*:*:*:*:*:*:*","matchCriteriaId":"4A932C79-8646-4023-9C12-9C7A2A6840EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*","versionStartIncluding":"17.7","versionEndIncluding":"17.12","matchCriteriaId":"08FA59A8-6A62-4B33-8952-D6E658F8DAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:17.2:*:*:*:*:*:*:*","matchCriteriaId":"4C57B2CD-FA02-4352-8EDC-A0F039DCCEBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*","matchCriteriaId":"202AD518-2E9B-4062-B063-9858AE1F9CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*","matchCriteriaId":"10864586-270E-4ACF-BDCC-ECFCD299305F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*","matchCriteriaId":"38340E3C-C452-4370-86D4-355B6B4E0A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:*:*:*:*:*:*:*:*","versionStartIncluding":"16.0","versionEndIncluding":"19.0","matchCriteriaId":"B92BB355-DB00-438E-84E5-8EC007009576"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_merchandising_system:15.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E7C9BB48-50B2-4735-9E2F-E492C708C36D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E702EBED-DB39-4084-84B1-258BC5FE7545"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_service_backbone:15.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3F7956BF-D5B6-484B-999C-36B45CD8B75B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_service_backbone:16.0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"77326E29-0F3C-4BF1-905F-FF89EB9A897A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*","matchCriteriaId":"490B2C44-CECD-4551-B04F-4076D0E053C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*","matchCriteriaId":"48EFC111-B01B-4C34-87E4-D6B2C40C0122"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*","matchCriteriaId":"073FEA23-E46A-4C73-9D29-95CFF4F5A59D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D6A4F71A-4269-40FC-8F61-1D1301F2B728"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"5A502118-5B2B-47AE-82EC-1999BD841103"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"36186","Ordinal":"1","Title":"CVE-2020-36186","CVE":"CVE-2020-36186","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"36186","Ordinal":"1","NoteData":"FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.","Type":"Description","Title":"CVE-2020-36186"},{"CveYear":"2020","CveId":"36186","Ordinal":"2","NoteData":"2021-01-06","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"36186","Ordinal":"3","NoteData":"2022-02-07","Type":"Other","Title":"Modified"}]}}}