VULNERABILITY INTELLIGENCE

CVE-2020-14195

CVSS score8.1 HIGH

EPSS probability4.55%

CISA KEVNot currently listed

Published2020-06-16

Last modified2026-10-08

Description

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).