CVE-2019-14540

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
VendorProductVersion
fasterxmljackson-databind
2.0.0 ≤
𝑥
< 2.6.7.3
fasterxmljackson-databind
2.7.0 ≤
𝑥
< 2.8.11.5
fasterxmljackson-databind
2.9.0 ≤
𝑥
< 2.9.10
netapponcommand_api_services
-
netapponcommand_workflow_automation
-
netappsteelstore_cloud_integrated_storage
-
debiandebian_linux
8.0
debiandebian_linux
9.0
debiandebian_linux
10.0
redhatjboss_enterprise_application_platform
7.2
redhatjboss_enterprise_application_platform
7.3
oraclebanking_platform
2.4.0
oraclebanking_platform
2.4.1
oraclebanking_platform
2.5.0
oraclebanking_platform
2.6.0
oraclebanking_platform
2.6.1
oraclebanking_platform
2.7.0
oraclebanking_platform
2.7.1
oraclecustomer_management_and_segmentation_foundation
18.0
oraclefinancial_services_analytical_applications_infrastructure
8.0.2 ≤
𝑥
≤ 8.0.8
oracleglobal_lifecycle_management_opatch
𝑥
< 11.2.0.3.23
oracleglobal_lifecycle_management_opatch
12.2.0.1.0 ≤
𝑥
< 12.2.0.1.19
oracleglobal_lifecycle_management_opatch
13.9.4.0.0 ≤
𝑥
< 13.9.4.2.1
oraclegoldengate_application_adapters
19.1.0.0.0
oraclegoldengate_stream_analytics
𝑥
< 19.1.0.0.1
oraclemysql
5.7.0 ≤
𝑥
≤ 5.7.30
oraclemysql
8.0.0 ≤
𝑥
≤ 8.0.20
oracleprimavera_gateway
15.2
oracleprimavera_gateway
15.2.18
oracleprimavera_gateway
16.2
oracleprimavera_gateway
16.2.11
oracleprimavera_gateway
17.12
oracleprimavera_gateway
17.12.6
oracleprimavera_gateway
18.8.0
oracleprimavera_gateway
18.8.8.1
oracleprimavera_unifier
17.7 ≤
𝑥
≤ 17.12
oracleprimavera_unifier
16.1
oracleprimavera_unifier
16.2
oracleprimavera_unifier
18.8
oracleprimavera_unifier
19.12
oracleretail_customer_management_and_segmentation_foundation
17.0
oracleretail_xstore_point_of_service
7.1
oracleretail_xstore_point_of_service
15.0
oracleretail_xstore_point_of_service
16.0
oracleretail_xstore_point_of_service
17.0
oracleretail_xstore_point_of_service
18.0
oracleweblogic_server
12.2.1.3.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
jackson-databind
bullseye (security)
2.12.1-1+deb11u1
fixed
bullseye
2.12.1-1+deb11u1
fixed
sid
2.14.0-1
fixed
trixie
2.14.0-1
fixed
bookworm
2.14.0-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
jackson-databind
noble
not-affected
mantic
not-affected
lunar
not-affected
kinetic
not-affected
jammy
not-affected
impish
not-affected
hirsute
not-affected
groovy
not-affected
focal
not-affected
eoan
ignored
disco
ignored
bionic
needs-triage
xenial
Fixed 2.4.2-3ubuntu0.1~esm2
released
trusty
needs-triage
References