CVE-2019-17267

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
VendorProductVersion
fasterxmljackson-databind
2.0.0 ≤
𝑥
< 2.8.11.5
fasterxmljackson-databind
2.9.0 ≤
𝑥
< 2.9.10
netappactive_iq_unified_manager
7.3 ≤
netappactive_iq_unified_manager
7.3 ≤
netappactive_iq_unified_manager
9.5 ≤
netapponcommand_api_services
-
netapponcommand_workflow_automation
-
netappservice_level_manager
-
netappsteelstore_cloud_integrated_storage
-
debiandebian_linux
8.0
redhatjboss_enterprise_application_platform
7.2
redhatjboss_enterprise_application_platform
7.3
oraclecustomer_management_and_segmentation_foundation
𝑥
< 18.0
oraclegoldengate_application_adapters
19.1.0.0.0
oracleretail_customer_management_and_segmentation_foundation
17.0
oracleweblogic_server
12.2.1.3.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
jackson-databind
bullseye (security)
2.12.1-1+deb11u1
fixed
bullseye
2.12.1-1+deb11u1
fixed
sid
2.14.0-1
fixed
trixie
2.14.0-1
fixed
bookworm
2.14.0-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
jackson-databind
noble
not-affected
mantic
not-affected
lunar
not-affected
kinetic
not-affected
jammy
not-affected
impish
not-affected
hirsute
not-affected
groovy
not-affected
focal
not-affected
eoan
ignored
disco
ignored
bionic
needs-triage
xenial
Fixed 2.4.2-3ubuntu0.1~esm2
released
trusty
needs-triage
References