CVE-2018-14718

Fixed in a distro release EPSS 13%

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.

Published 2019-01-02 · CVE record · OSV

Products: FasterXML jackson-databind, debian_linux, oracle banking_platform, oracle business_process_management_suite, oracle communications_billing_and_revenue_management, oracle communications_instant_messaging_server, oracle enterprise_manager_for_virtualization, oracle financial_services_analytical_applications_infrastructure, oracle global_lifecycle_management_opatch, oracle jd_edwards_enterpriseone_orchestrator, oracle jd_edwards_enterpriseone_tools, oracle jdeveloper, oracle nosql_database, oracle primavera_p6_enterprise_project_portfolio_management, oracle primavera_unifier, oracle retail_customer_management_and_segmentation_foundation, oracle retail_merchandising_system, oracle retail_workforce_management_software, oracle siebel_engineering_-_installer_&_deployment, oracle siebel_ui_framework, oracle webcenter_portal, netapp oncommand_workflow_automation, netapp snapcenter, netapp steelstore_cloud_integrated_storage, redhat openshift_container_platform

Fixed upstream

Distro releases