vulnerability

Oracle Database: Critical Patch Update - October 2022 (CVE-2020-36518)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Mar 11, 2022
Added
Oct 26, 2022
Modified
Aug 11, 2025

Description

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

Solution

oracle-apply-oct-2022-cpu
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.