Lucene search

CVE-2018-14721

🗓️ 02 Jan 2019 18:00:29Reported by [email protected]Type

FasterXML jackson-databind 2.x SSRF vulnerabilit

Reporter	Title	Published	Views	Family All 121
UbuntuCve	CVE-2018-14721	2 Jan 201900:00	–	ubuntucve
Atlassian	Update Application links to ensure that a version of jackson-databind containing a fix for CVE-2018-14721 is used	9 Jul 201902:43	–	atlassian
Atlassian	Update Application links to ensure that a version of jackson-databind containing a fix for CVE-2018-14721 is used	9 Jul 201902:47	–	atlassian
Atlassian	Update Application links to ensure that a version of jackson-databind containing a fix for CVE-2018-14721 is used	9 Jul 201902:47	–	atlassian
Atlassian	Update Application links to ensure that a version of jackson-databind containing a fix for CVE-2018-14721 is used	9 Jul 201902:43	–	atlassian
OSV	CVE-2018-14721	2 Jan 201918:29	–	osv
OSV	Server-Side Request Forgery (SSRF) in jackson-databind	4 Jan 201919:07	–	osv
OSV	Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.1 on RHEL 6 security update	13 Sep 202416:54	–	osv
OSV	Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.1 on RHEL 7 security update	13 Sep 202416:54	–	osv
OSV	jackson-databind - security update	4 Mar 201900:00	–	osv

Nvd

Node

fasterxml jackson-databindRange2.6.0–2.6.7.2

fasterxml jackson-databindRange2.7.0–2.7.9.5

fasterxml jackson-databindRange2.8.0–2.8.11.3

fasterxml jackson-databindRange2.9.0–2.9.7

fasterxml jackson-databindMatch2.7.0rc1

fasterxml jackson-databindMatch2.7.0rc2

fasterxml jackson-databindMatch2.7.0rc3

fasterxml jackson-databindMatch2.8.0rc1

fasterxml jackson-databindMatch2.8.0rc2

fasterxml jackson-databindMatch2.9.0pr1

fasterxml jackson-databindMatch2.9.0pr2

fasterxml jackson-databindMatch2.9.0pr3

fasterxml jackson-databindMatch2.9.0pr4

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

oracle banking_platformMatch2.5.0

oracle banking_platformMatch2.6.0

oracle banking_platformMatch2.6.1

oracle banking_platformMatch2.6.2

oracle communications_billing_and_revenue_managementMatch7.5

oracle communications_billing_and_revenue_managementMatch12.0

oracle enterprise_manager_for_virtualizationMatch13.2.2

oracle enterprise_manager_for_virtualizationMatch13.2.3

oracle enterprise_manager_for_virtualizationMatch13.3.1

oracle financial_services_analytical_applications_infrastructureMatch8.0.2

oracle financial_services_analytical_applications_infrastructureMatch8.0.3

oracle financial_services_analytical_applications_infrastructureMatch8.0.4

oracle financial_services_analytical_applications_infrastructureMatch8.0.5

oracle financial_services_analytical_applications_infrastructureMatch8.0.6

oracle financial_services_analytical_applications_infrastructureMatch8.0.7

oracle jdeveloperMatch12.1.3.0.0

oracle jdeveloperMatch12.2.1.3.0

oracle primavera_unifierRange17.1–17.12

oracle primavera_unifierMatch16.1

oracle primavera_unifierMatch16.2

oracle primavera_unifierMatch18.8

oracle retail_merchandising_systemMatch15.0

oracle retail_merchandising_systemMatch16.0

oracle webcenter_portalMatch12.2.1.3.0

Node

redhat jboss_enterprise_application_platformMatch7.2.0

redhat openshift_container_platformMatch3.11

Source	Link
lists	www.lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E
access	www.access.redhat.com/errata/RHSA-2019:4037
access	www.access.redhat.com/errata/RHSA-2019:1107
access	www.access.redhat.com/errata/RHSA-2019:1106
access	www.access.redhat.com/errata/RHBA-2019:0959
access	www.access.redhat.com/errata/RHSA-2019:0782
oracle	www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
access	www.access.redhat.com/errata/RHSA-2019:1108
lists	www.lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
security	www.security.netapp.com/advisory/ntap-20190530-0003/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Jan 2019 18:29Current

9.4High risk

Vulners AI Score9.4

CVSS27.5

CVSS310.0

EPSS0.010

CWE-918