NetSight
IP …
critical9.8

CVE-2019-14540

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.

Impact

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

Affected products

VendorProductAffected versions
FasterxmlJackson-Databind
from 2.0.0 before 2.6.7.3
from 2.7.0 before 2.8.11.5
from 2.9.0 before 2.9.10
NetappOncommand Api Services
All versions
NetappOncommand Workflow Automation
All versions
NetappSteelstore Cloud Integrated Storage
All versions
FedoraprojectFedora
Versions 30, 31
DebianDebian Linux
Versions 8.0, 9.0, 10.0
RedhatJboss Enterprise Application Platform
Versions 7.2, 7.3
OracleBanking Platform
Versions 2.4.0, 2.4.1, 2.5.0, 2.6.0, 2.6.1, 2.7.0
OracleCustomer Management And Segmentation Foundation
Version 18.0
OracleFinancial Services Analytical Applications Infrastructure
from 8.0.2 through 8.0.8
OracleGlobal Lifecycle Management Opatch
before 11.2.0.3.23
from 12.2.0.1.0 before 12.2.0.1.19
from 13.9.4.0.0 before 13.9.4.2.1
OracleGoldengate Application Adapters
Version 19.1.0.0.0

Weakness classification

CWE-502

References