Published: 02/01/2019 Updated: 07/11/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.

Vulnerable Product	Search on Vulmon	Subscribe to Product
fasterxml jackson-databind
debian debian linux 8.0
debian debian linux 9.0
oracle primavera unifier 16.2
oracle jd edwards enterpriseone tools 9.2
oracle primavera p6 enterprise project portfolio management 16.2
oracle primavera p6 enterprise project portfolio management 15.1
oracle banking platform 2.5.0
oracle primavera unifier 16.1
oracle primavera p6 enterprise project portfolio management 16.1
oracle jdeveloper 12.1.3.0.0
oracle primavera p6 enterprise project portfolio management 15.2
oracle retail merchandising system 16.0
oracle webcenter portal 12.2.1.3.0
oracle business process management suite 12.1.3.0.0
oracle business process management suite 12.2.1.3.0
oracle primavera p6 enterprise project portfolio management
oracle primavera p6 enterprise project portfolio management 18.8
oracle jd edwards enterpriseone orchestrator 9.2
oracle communications billing and revenue management 7.5
oracle communications billing and revenue management 12.0
oracle financial services analytical applications infrastructure 8.0.2
oracle financial services analytical applications infrastructure 8.0.3
oracle financial services analytical applications infrastructure 8.0.4
oracle financial services analytical applications infrastructure 8.0.5
oracle financial services analytical applications infrastructure 8.0.6
oracle financial services analytical applications infrastructure 8.0.7
oracle banking platform 2.6.0
oracle banking platform 2.6.1
oracle banking platform 2.6.2
oracle enterprise manager for virtualization 13.2.2
oracle enterprise manager for virtualization 13.2.3
oracle enterprise manager for virtualization 13.3.1
oracle primavera unifier 18.8
oracle retail customer management and segmentation foundation 17.0
oracle jdeveloper 12.2.1.3.0
oracle retail workforce management software 1.60.9.0.0
oracle primavera unifier
oracle retail merchandising system 15.0
oracle siebel ui framework
oracle global lifecycle management opatch
oracle nosql database
oracle siebel engineering - installer \\& deployment
oracle communications instant messaging server 10.0.1.3.0
oracle nosql database 19.3.12
netapp snapcenter -
netapp steelstore cloud integrated storage -
netapp oncommand workflow automation -
redhat openshift container platform 3.10
redhat openshift container platform
redhat openshift_container_platform

Multiple security issues were found in jackson-databind, a Java library to parse JSON and other data formats which could result in information disclosure or the execution of arbitrary code For the stable distribution (stretch), these problems have been fixed in version 286-1+deb9u5 We recommend that you upgrade your jackson-databind packages F ...

Synopsis Important: Red Hat FIS 20 on Fuse 630 R13 security and bug fix update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat Fuse Integration ServicesRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability ...

Synopsis Important: Red Hat Decision Manager 740 Security Update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat Decision ManagerRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) ba ...

Synopsis Important: Red Hat Data Grid 732 security update Type/Severity Security Advisory: Important Topic An update for Red Hat Data Grid is now availableRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, whic ...

Synopsis Important: Red Hat JBoss Data Virtualization 648 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Data VirtualizationRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scorin ...

Synopsis Important: rh-maven35-jackson-databind security update Type/Severity Security Advisory: Important Topic An update for rh-maven35-jackson-databind is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulne ...

Synopsis Important: Red Hat JBoss BRMS 6412 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss BRMSRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, w ...

Synopsis Important: Red Hat Process Automation Manager 740 Security Update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat Process Automation ManagerRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scor ...

Synopsis Important: EAP Continuous Delivery Technical Preview Release 16 security update Type/Severity Security Advisory: Important Topic This is a security update for JBoss EAP Continuous Delivery 160Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnera ...

Synopsis Important: OpenShift Container Platform logging-elasticsearch5-container security update Type/Severity Security Advisory: Important Topic An update for logging-elasticsearch5-container is now available for Red Hat OpenShift Container Platform 311Red Hat Product Security has rated this update as h ...

Synopsis Important: Red Hat Fuse 750 security update Type/Severity Security Advisory: Important Topic A minor version update (from 74 to 75) is now available for Red Hat Fuse The purpose of this text-only errata is to inform you about the security issues fixed in this releaseRed Hat Product Security h ...

Synopsis Important: Red Hat OpenShift Application Runtimes Thorntail 240 security & bug fix update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat OpenShift Application RuntimesRed Hat Product Security has rated this update as having a security impact of Import ...

Synopsis Important: Red Hat JBoss BPM Suite 6412 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss BPM SuiteRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) bas ...

Synopsis Important: Red Hat JBoss Fuse/A-MQ 63 R13 security and bug fix update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Fuse 63 and Red Hat JBoss A-MQ 63Red Hat Product Security has rated this update as having a security impact of Important A Common ...

Synopsis Important: OpenShift Container Platform 4118 logging-elasticsearch5 security update Type/Severity Security Advisory: Important Topic An update for logging-elasticsearch5-container is now available for Red Hat OpenShift Container Platform 41Red Hat Product Security has rated this update as havin ...

Get Started

CVE-2018-14718

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect