Kritik CVSS 9.8

CVE-2019-14540: Jackson-databind: güvenilmeyen verinin serileştirmeden çıkarılması

Yayın: 16 Eylül 2019 01:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

Ürün	Başlangıç	Bitiş	Düzeltildi
fasterxml-jackson-databind	2.0.0	—	2.6.7.3
fasterxml-jackson-databind	2.7.0	—	2.8.11.5
fasterxml-jackson-databind	2.9.0	—	2.9.10
netapp-oncommand-api-services	—	—	—
netapp-oncommand-workflow-automation	—	—	—
netapp-steelstore-cloud-integrated-storage	—	—	—
fedoraproject-fedora	30	30	—
fedoraproject-fedora	31	31	—
debian-debian-linux	8.0	8.0	—
debian-debian-linux	9.0	9.0	—
debian-debian-linux	10.0	10.0	—
redhat-jboss-enterprise-application-platform	7.2	7.2	—
redhat-jboss-enterprise-application-platform	7.3	7.3	—
oracle-banking-platform	2.4.0	2.4.0	—
oracle-banking-platform	2.4.1	2.4.1	—
oracle-banking-platform	2.5.0	2.5.0	—
oracle-banking-platform	2.6.0	2.6.0	—
oracle-banking-platform	2.6.1	2.6.1	—
oracle-banking-platform	2.7.0	2.7.0	—
oracle-banking-platform	2.7.1	2.7.1	—
oracle-customer-management-and-segmentation-foundation	18.0	18.0	—
oracle-financial-services-analytical-applications-infrastructure	8.0.2	8.0.8	—
oracle-global-lifecycle-management-opatch	—	—	11.2.0.3.23
oracle-global-lifecycle-management-opatch	12.2.0.1.0	—	12.2.0.1.19
oracle-global-lifecycle-management-opatch	13.9.4.0.0	—	13.9.4.2.1
oracle-goldengate-application-adapters	19.1.0.0.0	19.1.0.0.0	—
oracle-goldengate-stream-analytics	—	—	19.1.0.0.1
oracle-mysql	5.7.0	5.7.30	—
oracle-mysql	8.0.0	8.0.20	—
oracle-primavera-gateway	15.2	15.2	—