CVE-2018-14719

Fixed in a distro release EPSS 10%

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.

Published 2019-01-02 · CVE record · OSV

Products: FasterXML jackson-databind, debian_linux, oracle banking_platform, oracle business_process_management_suite, oracle clusterware, oracle communications_billing_and_revenue_management, oracle database_server, oracle enterprise_manager_for_virtualization, oracle financial_services_analytical_applications_infrastructure, oracle global_lifecycle_management_opatch, oracle jdeveloper, oracle primavera_p6_enterprise_project_portfolio_management, oracle primavera_unifier, oracle retail_merchandising_system, oracle retail_workforce_management_software, oracle webcenter_portal, redhat openshift_container_platform, netapp oncommand_workflow_automation, netapp snapcenter, netapp steelstore_cloud_integrated_storage

Fixed upstream

Distro releases