AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2020-36188.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSHIGH / 8.1CVSS 3.1 · nvd@nist.gov
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 08, 2026

Disclosure summary

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.

Source-reported weakness categories

CWE-502

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2020-36188

Open original source · Updated Oct 08, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
fasterxmljackson-databind* {"versionStartIncluding":"2.7.0","versionEndExcluding":"2.9.10.8"}
netappcloud_backup-
netappservice_level_manager-
debiandebian_linux9.0
oracleagile_product_lifecycle_management9.3.6
oracleapplication_testing_suite13.3.0.1
oracleautovue_for_agile_product_lifecycle_management21.0.2
oraclebanking_corporate_lending_process_management14.2
oraclebanking_corporate_lending_process_management14.3
oraclebanking_corporate_lending_process_management14.5
oraclebanking_credit_facilities_process_management14.2
oraclebanking_credit_facilities_process_management14.3
oraclebanking_credit_facilities_process_management14.5
oraclebanking_extensibility_workbench14.2
oraclebanking_extensibility_workbench14.3
oraclebanking_extensibility_workbench14.5
oraclebanking_supply_chain_finance14.2
oraclebanking_supply_chain_finance14.3
oraclebanking_supply_chain_finance14.5
oraclebanking_treasury_management4.4
oraclebanking_virtual_account_management14.2.0
oraclebanking_virtual_account_management14.3.0
oraclebanking_virtual_account_management14.5.0
oracleblockchain_platform* {"versionEndIncluding":"21.1.2"}
oraclecommerce_platform* {"versionStartIncluding":"11.3.0","versionEndIncluding":"11.3.2"}
oraclecommerce_platform11.2.0
oraclecommunications_billing_and_revenue_management7.5.0.23.0
oraclecommunications_billing_and_revenue_management12.0.0.3.0
oraclecommunications_cloud_native_core_policy1.14.0
oraclecommunications_cloud_native_core_unified_data_repository1.4.0
oraclecommunications_convergent_charging_controller12.0.4.0.0
oraclecommunications_diameter_signaling_route* {"versionStartIncluding":"8.0.0.0","versionEndIncluding":"8.5.0.0"}
oraclecommunications_element_manager* {"versionStartIncluding":"8.2.0.0","versionEndIncluding":"8.2.4.0"}
oraclecommunications_evolved_communications_application_server7.1
oraclecommunications_instant_messaging_server10.0.1.5.0
oraclecommunications_network_charging_and_control12.0.4.0.0
oraclecommunications_offline_mediation_controller12.0.0.3
oraclecommunications_policy_management12.5.0
oraclecommunications_pricing_design_center12.0.0.4.0
oraclecommunications_services_gatekeeper7.0
oraclecommunications_session_report_manager* {"versionStartIncluding":"8.0.0.0","versionEndIncluding":"8.2.2.1"}
oraclecommunications_session_route_manager* {"versionStartIncluding":"8.2.0.0","versionEndIncluding":"8.2.2.1"}
oraclecommunications_unified_inventory_management7.4.1
oracledata_integrator12.2.1.4.0
oracledocumaker12.6.0
oracledocumaker12.6.3
oracledocumaker12.6.4
oraclegoldengate_application_adapters19.1.0.0.0
oracleinsurance_policy_administration* {"versionStartIncluding":"11.1.0","versionEndIncluding":"11.3.0"}
oracleinsurance_policy_administration11.0.2
oracleinsurance_rules_palette* {"versionStartIncluding":"11.1.0","versionEndIncluding":"11.3.0"}
oracleinsurance_rules_palette11.0.2
oraclejd_edwards_enterpriseone_orchestrator* {"versionEndExcluding":"9.2.5.3"}
oraclejd_edwards_enterpriseone_tools* {"versionEndExcluding":"9.2.5.3"}
oracleprimavera_gateway* {"versionStartIncluding":"19.12.0","versionEndIncluding":"19.12.10"}
oracleprimavera_gateway20.12.0
oracleprimavera_unifier* {"versionStartIncluding":"17.7","versionEndIncluding":"17.12"}
oracleprimavera_unifier17.2
oracleprimavera_unifier18.8
oracleprimavera_unifier19.12
oracleprimavera_unifier20.12
oracleretail_customer_management_and_segmentation_foundation* {"versionStartIncluding":"16.0","versionEndIncluding":"19.0"}
oracleretail_merchandising_system15.0.3
oracleretail_service_backbone14.1.3.2
oracleretail_service_backbone15.0.3.1
oracleretail_service_backbone16.0.3.0
oracleretail_xstore_point_of_service16.0.6
oracleretail_xstore_point_of_service17.0.4
oracleretail_xstore_point_of_service18.0.3
oracleretail_xstore_point_of_service19.0.2
oraclewebcenter_portal12.2.1.3.0
oraclewebcenter_portal12.2.1.4.0

Original records & references

PUBLISHED 2021-01-06T18:15:13-05:00
MODIFIED 2026-10-08T17:17:29-04:00
INGESTED 2026-10-10T20:50:19-04:00