CVEDB API

Vulnerability Details CVE-2018-19361

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.049

EPSS Ranking 89.1%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-19361

Fasterxml » Jackson-Databind » Version: 2.6.0

cpe:2.3:a:fasterxml:jackson-databind:2.6.0
Fasterxml » Jackson-Databind » Version: 2.6.1

cpe:2.3:a:fasterxml:jackson-databind:2.6.1
Fasterxml » Jackson-Databind » Version: 2.6.2

cpe:2.3:a:fasterxml:jackson-databind:2.6.2
Fasterxml » Jackson-Databind » Version: 2.6.3

cpe:2.3:a:fasterxml:jackson-databind:2.6.3
Fasterxml » Jackson-Databind » Version: 2.6.4

cpe:2.3:a:fasterxml:jackson-databind:2.6.4
Fasterxml » Jackson-Databind » Version: 2.6.5

cpe:2.3:a:fasterxml:jackson-databind:2.6.5
Fasterxml » Jackson-Databind » Version: 2.6.6

cpe:2.3:a:fasterxml:jackson-databind:2.6.6
Fasterxml » Jackson-Databind » Version: 2.6.7

cpe:2.3:a:fasterxml:jackson-databind:2.6.7
Fasterxml » Jackson-Databind » Version: 2.6.7.1

cpe:2.3:a:fasterxml:jackson-databind:2.6.7.1
Fasterxml » Jackson-Databind » Version: 2.6.7.2

cpe:2.3:a:fasterxml:jackson-databind:2.6.7.2
Fasterxml » Jackson-Databind » Version: 2.7.0

cpe:2.3:a:fasterxml:jackson-databind:2.7.0
Fasterxml » Jackson-Databind » Version: 2.7.1

cpe:2.3:a:fasterxml:jackson-databind:2.7.1
Fasterxml » Jackson-Databind » Version: 2.7.1-1

cpe:2.3:a:fasterxml:jackson-databind:2.7.1-1
Fasterxml » Jackson-Databind » Version: 2.7.2

cpe:2.3:a:fasterxml:jackson-databind:2.7.2
Fasterxml » Jackson-Databind » Version: 2.7.3

cpe:2.3:a:fasterxml:jackson-databind:2.7.3
Fasterxml » Jackson-Databind » Version: 2.7.4

cpe:2.3:a:fasterxml:jackson-databind:2.7.4
Fasterxml » Jackson-Databind » Version: 2.7.5

cpe:2.3:a:fasterxml:jackson-databind:2.7.5
Fasterxml » Jackson-Databind » Version: 2.7.6

cpe:2.3:a:fasterxml:jackson-databind:2.7.6
Fasterxml » Jackson-Databind » Version: 2.7.7

cpe:2.3:a:fasterxml:jackson-databind:2.7.7
Fasterxml » Jackson-Databind » Version: 2.7.8

cpe:2.3:a:fasterxml:jackson-databind:2.7.8
Fasterxml » Jackson-Databind » Version: 2.7.9

cpe:2.3:a:fasterxml:jackson-databind:2.7.9
Fasterxml » Jackson-Databind » Version: 2.7.9.1

cpe:2.3:a:fasterxml:jackson-databind:2.7.9.1
Fasterxml » Jackson-Databind » Version: 2.7.9.2

cpe:2.3:a:fasterxml:jackson-databind:2.7.9.2
Fasterxml » Jackson-Databind » Version: 2.7.9.3

cpe:2.3:a:fasterxml:jackson-databind:2.7.9.3
Fasterxml » Jackson-Databind » Version: 2.7.9.4

cpe:2.3:a:fasterxml:jackson-databind:2.7.9.4
Fasterxml » Jackson-Databind » Version: 2.8.0

cpe:2.3:a:fasterxml:jackson-databind:2.8.0
Fasterxml » Jackson-Databind » Version: 2.8.1

cpe:2.3:a:fasterxml:jackson-databind:2.8.1
Fasterxml » Jackson-Databind » Version: 2.8.10

cpe:2.3:a:fasterxml:jackson-databind:2.8.10
Fasterxml » Jackson-Databind » Version: 2.8.11

cpe:2.3:a:fasterxml:jackson-databind:2.8.11
Fasterxml » Jackson-Databind » Version: 2.8.11.1

cpe:2.3:a:fasterxml:jackson-databind:2.8.11.1
Fasterxml » Jackson-Databind » Version: 2.8.11.2

cpe:2.3:a:fasterxml:jackson-databind:2.8.11.2
Fasterxml » Jackson-Databind » Version: 2.8.2

cpe:2.3:a:fasterxml:jackson-databind:2.8.2
Fasterxml » Jackson-Databind » Version: 2.8.3

cpe:2.3:a:fasterxml:jackson-databind:2.8.3
Fasterxml » Jackson-Databind » Version: 2.8.4

cpe:2.3:a:fasterxml:jackson-databind:2.8.4
Fasterxml » Jackson-Databind » Version: 2.8.5

cpe:2.3:a:fasterxml:jackson-databind:2.8.5
Fasterxml » Jackson-Databind » Version: 2.8.6

cpe:2.3:a:fasterxml:jackson-databind:2.8.6
Fasterxml » Jackson-Databind » Version: 2.8.7

cpe:2.3:a:fasterxml:jackson-databind:2.8.7
Fasterxml » Jackson-Databind » Version: 2.8.8

cpe:2.3:a:fasterxml:jackson-databind:2.8.8
Fasterxml » Jackson-Databind » Version: 2.8.8.1

cpe:2.3:a:fasterxml:jackson-databind:2.8.8.1
Fasterxml » Jackson-Databind » Version: 2.8.9

cpe:2.3:a:fasterxml:jackson-databind:2.8.9
Fasterxml » Jackson-Databind » Version: 2.9.0

cpe:2.3:a:fasterxml:jackson-databind:2.9.0
Fasterxml » Jackson-Databind » Version: 2.9.1

cpe:2.3:a:fasterxml:jackson-databind:2.9.1
Fasterxml » Jackson-Databind » Version: 2.9.2

cpe:2.3:a:fasterxml:jackson-databind:2.9.2
Fasterxml » Jackson-Databind » Version: 2.9.3

cpe:2.3:a:fasterxml:jackson-databind:2.9.3
Fasterxml » Jackson-Databind » Version: 2.9.4

cpe:2.3:a:fasterxml:jackson-databind:2.9.4
Fasterxml » Jackson-Databind » Version: 2.9.5

cpe:2.3:a:fasterxml:jackson-databind:2.9.5
Fasterxml » Jackson-Databind » Version: 2.9.6

cpe:2.3:a:fasterxml:jackson-databind:2.9.6
Fasterxml » Jackson-Databind » Version: 2.9.7

cpe:2.3:a:fasterxml:jackson-databind:2.9.7
Oracle » Business Process Management Suite » Version: 12.1.3.0.0

cpe:2.3:a:oracle:business_process_management_suite:12.1.3.0.0
Oracle » Business Process Management Suite » Version: 12.2.1.3.0

cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 15.1

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 15.2

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 16.1

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 16.2

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.10

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.10
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.11

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.11
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.12

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.12
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.7

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.7
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.8

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.8
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 17.9

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:17.9
Oracle » Primavera P6 Enterprise Project Portfolio Management » Version: 18.8

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:18.8
Oracle » Primavera Unifier » Version: 16.1

cpe:2.3:a:oracle:primavera_unifier:16.1
Oracle » Primavera Unifier » Version: 16.2

cpe:2.3:a:oracle:primavera_unifier:16.2
Oracle » Primavera Unifier » Version: 17.10

cpe:2.3:a:oracle:primavera_unifier:17.10
Oracle » Primavera Unifier » Version: 17.11

cpe:2.3:a:oracle:primavera_unifier:17.11
Oracle » Primavera Unifier » Version: 17.12

cpe:2.3:a:oracle:primavera_unifier:17.12
Oracle » Primavera Unifier » Version: 17.7

cpe:2.3:a:oracle:primavera_unifier:17.7
Oracle » Primavera Unifier » Version: 17.8

cpe:2.3:a:oracle:primavera_unifier:17.8
Oracle » Primavera Unifier » Version: 17.9

cpe:2.3:a:oracle:primavera_unifier:17.9
Oracle » Primavera Unifier » Version: 18.8

cpe:2.3:a:oracle:primavera_unifier:18.8
Oracle » Retail Workforce Management Software » Version: 1.60.9.0.0

cpe:2.3:a:oracle:retail_workforce_management_software:1.60.9.0.0
Oracle » Webcenter Portal » Version: 12.2.1.3.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0
Redhat » Automation Manager » Version: 7.3.1

cpe:2.3:a:redhat:automation_manager:7.3.1
Redhat » Decision Manager » Version: 7.3.1

cpe:2.3:a:redhat:decision_manager:7.3.1
Redhat » Jboss Bpm Suite » Version: 6.4.11

cpe:2.3:a:redhat:jboss_bpm_suite:6.4.11
Redhat » Jboss Brms » Version: 6.4.10

cpe:2.3:a:redhat:jboss_brms:6.4.10
Redhat » Openshift Container Platform » Version: 3.11

cpe:2.3:a:redhat:openshift_container_platform:3.11
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-19361

Products

Pricing

Contact Us