ID CVE-2018-14719
Summary FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.
References
Vulnerable Configurations
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.0:-:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.0:-:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.0:rc4:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.0:rc4:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.6:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.7:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.7:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.6.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.6.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.0:-:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.0:-:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.1-1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.1-1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.4:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.4:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.6:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.6:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.7:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.7:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.8:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.8:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.9:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.9:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.9.4:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.9.4:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.9.5:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.9.5:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.3:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.4:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.4:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.5:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.5:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.6:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.6:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.7:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.7:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.8:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.8:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.9:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.9:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.10:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.10:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.11:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.11:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.11.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.11.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.11.2:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.11.2:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.0:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.0:-:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.0:-:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease1:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease1:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease2:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease2:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease3:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease3:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease4:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease4:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.4:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.4:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.5:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.5:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.6:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.6:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_platform:2.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:banking_platform:2.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:business_process_management_suite:12.1.3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:business_process_management_suite:12.1.3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:clusterware:12.1.0.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:clusterware:12.1.0.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:11.2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:11.2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jdeveloper:12.1.3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:jdeveloper:12.1.3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.9:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.9:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.10:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.10:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.11:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.11:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.12:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.12:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:18.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:18.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:enterprise_manager_for_virtualization:13.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:19c:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:19c:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:global_lifecycle_management_opatch:12.2.0.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:global_lifecycle_management_opatch:12.2.0.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:global_lifecycle_management_opatch:13.9.4.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:global_lifecycle_management_opatch:13.9.4.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:retail_merchandising_system:16.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:retail_merchandising_system:16.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:retail_workforce_management_software:1.60.9.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:retail_workforce_management_software:1.60.9.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_unifier:17.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_unifier:17.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_unifier:17.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_unifier:17.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_unifier:17.9:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_unifier:17.9:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_unifier:17.10:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_unifier:17.10:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_unifier:17.11:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_unifier:17.11:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_unifier:17.12:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:primavera_unifier:17.12:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:retail_merchandising_system:15.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:retail_merchandising_system:15.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:x86:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:x86:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11.43:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11.43:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11.51:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11.51:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11.59:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11.59:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11.69:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11.69:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11.82:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11.82:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11.88:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11.88:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11.98:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11.98:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11.104:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11.104:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11.117:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11.117:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11.129:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11.129:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11.135:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11.135:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11.141:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11.141:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11.146:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11.146:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.12:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.12:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.13:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.13:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.15:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.15:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.16:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.16:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.17:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.17:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.18:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.18:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.19:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.19:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.20:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.20:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.21:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.21:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.22:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.22:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.23:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.23:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.6.25:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.6.25:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1.11:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1.11:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1.13:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1.13:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1.14:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1.14:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1.15:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1.15:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1.16:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1.16:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1.17:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1.17:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
    cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
  • cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*
    cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*
  • cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:*:*:*:*:*:*:*:*
    cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:*:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 21-05-2021 - 15:22)
Impact:
Exploitability:
CWE CWE-502
CAPEC
  • Object Injection
    An adversary attempts to exploit an application by injecting additional, malicious content during its processing of serialized objects. Developers leverage serialization in order to convert data or state into a static, binary format for saving to disk or transferring over a network. These objects are then deserialized when needed to recover the data/state. By injecting a malformed object into a vulnerable application, an adversary can potentially compromise the application by manipulating the deserialization process. This can result in a number of unwanted outcomes, including remote code execution.
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
redhat via4
advisories
  • rhsa
    id RHBA-2019:0959
  • rhsa
    id RHSA-2019:0782
  • rhsa
    id RHSA-2019:0877
  • rhsa
    id RHSA-2019:1782
  • rhsa
    id RHSA-2019:1797
  • rhsa
    id RHSA-2019:1822
  • rhsa
    id RHSA-2019:1823
  • rhsa
    id RHSA-2019:2804
  • rhsa
    id RHSA-2019:2858
  • rhsa
    id RHSA-2019:3002
  • rhsa
    id RHSA-2019:3140
  • rhsa
    id RHSA-2019:3149
  • rhsa
    id RHSA-2019:3892
  • rhsa
    id RHSA-2019:4037
rpms
  • rh-maven35-jackson-databind-0:2.7.6-2.5.el7
  • rh-maven35-jackson-databind-javadoc-0:2.7.6-2.5.el7
refmap via4
bugtraq 20190527 [SECURITY] [DSA 4452-1] jackson-databind security update
confirm
debian DSA-4452
misc
mlist
  • [debian-lts-announce] 20190304 [SECURITY] [DLA 1703-1] jackson-databind security update
  • [drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities
  • [drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities
  • [drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities
  • [geode-issues] 20200831 [jira] [Created] (GEODE-8471) Dependency security issues in geode-core-1.12
  • [pulsar-commits] 20190416 [GitHub] [pulsar] one70six opened a new issue #4057: Security Vulnerabilities - Black Duck Scan - Pulsar v.2.3.1
Last major update 21-05-2021 - 15:22
Published 02-01-2019 - 18:29
Last modified 21-05-2021 - 15:22
Back to Top