Lucene search

CVE-2018-19362

🗓️ 02 Jan 2019 18:00:29Reported by mitreType

FasterXML jackson-databind 2.x before 2.9.8 CVE-2018-1936

Reporter	Title	Published	Views	Family All 113
RedhatCVE	CVE-2018-19362	9 Apr 202012:07	–	redhatcve
Github Security Blog	com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data	4 Jan 201919:07	–	github
Debian CVE	CVE-2018-19362	2 Jan 201918:29	–	debiancve
OSV	CVE-2018-19362	2 Jan 201918:29	–	osv
OSV	com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data	4 Jan 201919:07	–	osv
OSV	jackson-databind - security update	4 Mar 201900:00	–	osv
OSV	Red Hat Security Advisory: rh-maven35-jackson-databind security update	13 Sep 202416:54	–	osv
OSV	jackson-databind - security update	24 May 201900:00	–	osv
OSV	jackson-databind vulnerabilities	15 Mar 202121:47	–	osv
Veracode	Remote Code Execution (RCE)	3 Jan 201903:06	–	veracode

Nvd

Node

fasterxml jackson-databindRange2.6.0–2.6.7.2

fasterxml jackson-databindRange2.7.0–2.7.9.5

fasterxml jackson-databindRange2.8.0–2.8.11.3

fasterxml jackson-databindRange2.9.0–2.9.8

Node

debian debian_linuxMatch8.0

Node

oracle business_process_management_suiteMatch12.1.3.0.0

oracle business_process_management_suiteMatch12.2.1.3.0

oracle primavera_p6_enterprise_project_portfolio_managementRange17.7–17.12

oracle primavera_p6_enterprise_project_portfolio_managementMatch15.1

oracle primavera_p6_enterprise_project_portfolio_managementMatch15.2

oracle primavera_p6_enterprise_project_portfolio_managementMatch16.1

oracle primavera_p6_enterprise_project_portfolio_managementMatch16.2

oracle primavera_p6_enterprise_project_portfolio_managementMatch18.8

oracle primavera_unifierRange17.7–17.12

oracle primavera_unifierMatch16.1

oracle primavera_unifierMatch16.2

oracle primavera_unifierMatch18.8

oracle retail_workforce_management_softwareMatch1.60.9.0.0

oracle webcenter_portalMatch12.2.1.3.0

Node

redhat automation_managerMatch7.3.1

redhat decision_managerMatch7.3.1

redhat jboss_bpm_suiteMatch6.4.11

redhat jboss_brmsMatch6.4.10

redhat openshift_container_platformMatch3.11

Source	Link
lists	www.lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuapr2020.html
lists	www.lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
access	www.access.redhat.com/errata/RHBA-2019:0959
access	www.access.redhat.com/errata/RHSA-2019:3149
github	www.github.com/FasterXML/jackson-databind/issues/2186
lists	www.lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c%40%3Ccommits.pulsar.apache.org%3E
github	www.github.com/FasterXML/jackson-databind/commit/42912cac4753f3f718ece875e4d486f8264c2f2b
security	www.security.netapp.com/advisory/ntap-20190530-0003/
lists	www.lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Jan 2019 18:29Current

8.8High risk

Vulners AI Score8.8

CVSS27.5

CVSS39.8

EPSS0.007

CWE-502