Lucene search

CVE-2018-19361

🗓️ 02 Jan 2019 18:00:29Reported by mitreType

FasterXML jackson-databind 2.x before 2.9.8 allows unspecified impact via openjpa class polymorphic deserialization

Reporter	Title	Published	Views	Family All 113
NVD	CVE-2018-19361	2 Jan 201918:29	–	nvd
OSV	Deserialization of Untrusted Data in jackson-databind	4 Jan 201919:07	–	osv
OSV	CVE-2018-19361	2 Jan 201918:29	–	osv
OSV	Red Hat Security Advisory: rh-maven35-jackson-databind security update	13 Sep 202416:54	–	osv
OSV	jackson-databind - security update	4 Mar 201900:00	–	osv
OSV	jackson-databind - security update	24 May 201900:00	–	osv
OSV	jackson-databind vulnerabilities	15 Mar 202121:47	–	osv
Debian CVE	CVE-2018-19361	2 Jan 201918:29	–	debiancve
UbuntuCve	CVE-2018-19361	2 Jan 201900:00	–	ubuntucve
Veracode	Remote Code Execution (RCE)	3 Jan 201906:15	–	veracode

Nvd

Node

fasterxml jackson-databindRange2.6.0–2.6.7.2

fasterxml jackson-databindRange2.7.0–2.7.9.5

fasterxml jackson-databindRange2.8.0–2.8.11.3

fasterxml jackson-databindRange2.9.0–2.9.8

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

oracle business_process_management_suiteMatch12.1.3.0.0

oracle business_process_management_suiteMatch12.2.1.3.0

oracle primavera_p6_enterprise_project_portfolio_managementRange17.7–17.12

oracle primavera_p6_enterprise_project_portfolio_managementMatch15.1

oracle primavera_p6_enterprise_project_portfolio_managementMatch15.2

oracle primavera_p6_enterprise_project_portfolio_managementMatch16.1

oracle primavera_p6_enterprise_project_portfolio_managementMatch16.2

oracle primavera_p6_enterprise_project_portfolio_managementMatch18.8

oracle primavera_unifierRange17.7–17.12

oracle primavera_unifierMatch16.1

oracle primavera_unifierMatch16.2

oracle primavera_unifierMatch18.8

oracle retail_workforce_management_softwareMatch1.60.9.0.0

oracle webcenter_portalMatch12.2.1.3.0

Node

redhat automation_managerMatch7.3.1

redhat decision_managerMatch7.3.1

redhat jboss_bpm_suiteMatch6.4.11

redhat jboss_brmsMatch6.4.10

redhat openshift_container_platformMatch3.11

Source	Link
oracle	www.oracle.com/security-alerts/cpuapr2020.html
access	www.access.redhat.com/errata/RHSA-2019:3892
lists	www.lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E
lists	www.lists.debian.org/debian-lts-announce/2019/03/msg00005.html
issues	www.issues.apache.org/jira/browse/TINKERPOP-2121
github	www.github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8
access	www.access.redhat.com/errata/RHSA-2019:1797
access	www.access.redhat.com/errata/RHSA-2019:4037
access	www.access.redhat.com/errata/RHSA-2019:2858

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Jan 2019 18:29Current

8.8High risk

Vulners AI Score8.8

CVSS27.5

CVSS39.8

EPSS0.007

CWE-502