diff --git a/database/java/2020/14195.yaml b/database/java/2020/14195.yaml
new file mode 100644
index 0000000000..1ce4ae4fd1
--- /dev/null
+++ b/database/java/2020/14195.yaml
@@ -0,0 +1,17 @@
+---
+cve: 2020-14195
+title: CVE in com.fasterxml.jackson.core:jackson-databind
+description: >
+    FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).
+cvss_v2: 6.8
+references:
+    - https://github.com/FasterXML/jackson-databind/issues/2765
+    - https://lists.debian.org/debian-lts-announce/2020/07/msg00001.html
+    - https://security.netapp.com/advisory/ntap-20200702-0003/
+affected:
+    - groupId: com.fasterxml.jackson.core
+      artifactId: jackson-databind
+      version:
+        - "<=2.9.10.4"
+      fixedin:
+        - ">=2.9.10.5"