CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-16943

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.018

EPSS Ranking 82.0%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 6.8

References

Products affected by CVE-2019-16943

Fasterxml » Jackson-Databind » Version: 2.0.0

cpe:2.3:a:fasterxml:jackson-databind:2.0.0
Fasterxml » Jackson-Databind » Version: 2.0.1

cpe:2.3:a:fasterxml:jackson-databind:2.0.1
Fasterxml » Jackson-Databind » Version: 2.0.2

cpe:2.3:a:fasterxml:jackson-databind:2.0.2
Fasterxml » Jackson-Databind » Version: 2.0.4

cpe:2.3:a:fasterxml:jackson-databind:2.0.4
Fasterxml » Jackson-Databind » Version: 2.0.5

cpe:2.3:a:fasterxml:jackson-databind:2.0.5
Fasterxml » Jackson-Databind » Version: 2.0.6

cpe:2.3:a:fasterxml:jackson-databind:2.0.6
Fasterxml » Jackson-Databind » Version: 2.1.0

cpe:2.3:a:fasterxml:jackson-databind:2.1.0
Fasterxml » Jackson-Databind » Version: 2.1.1

cpe:2.3:a:fasterxml:jackson-databind:2.1.1
Fasterxml » Jackson-Databind » Version: 2.1.2

cpe:2.3:a:fasterxml:jackson-databind:2.1.2
Fasterxml » Jackson-Databind » Version: 2.1.3

cpe:2.3:a:fasterxml:jackson-databind:2.1.3
Fasterxml » Jackson-Databind » Version: 2.1.4

cpe:2.3:a:fasterxml:jackson-databind:2.1.4
Fasterxml » Jackson-Databind » Version: 2.1.5

cpe:2.3:a:fasterxml:jackson-databind:2.1.5
Fasterxml » Jackson-Databind » Version: 2.2.0

cpe:2.3:a:fasterxml:jackson-databind:2.2.0
Fasterxml » Jackson-Databind » Version: 2.2.1

cpe:2.3:a:fasterxml:jackson-databind:2.2.1
Fasterxml » Jackson-Databind » Version: 2.2.2

cpe:2.3:a:fasterxml:jackson-databind:2.2.2
Fasterxml » Jackson-Databind » Version: 2.2.3

cpe:2.3:a:fasterxml:jackson-databind:2.2.3
Fasterxml » Jackson-Databind » Version: 2.2.4

cpe:2.3:a:fasterxml:jackson-databind:2.2.4
Fasterxml » Jackson-Databind » Version: 2.3.0

cpe:2.3:a:fasterxml:jackson-databind:2.3.0
Fasterxml » Jackson-Databind » Version: 2.3.1

cpe:2.3:a:fasterxml:jackson-databind:2.3.1
Fasterxml » Jackson-Databind » Version: 2.3.2

cpe:2.3:a:fasterxml:jackson-databind:2.3.2
Fasterxml » Jackson-Databind » Version: 2.3.3

cpe:2.3:a:fasterxml:jackson-databind:2.3.3
Fasterxml » Jackson-Databind » Version: 2.3.4

cpe:2.3:a:fasterxml:jackson-databind:2.3.4
Fasterxml » Jackson-Databind » Version: 2.3.5

cpe:2.3:a:fasterxml:jackson-databind:2.3.5
Fasterxml » Jackson-Databind » Version: 2.4.0

cpe:2.3:a:fasterxml:jackson-databind:2.4.0
Fasterxml » Jackson-Databind » Version: 2.4.1

cpe:2.3:a:fasterxml:jackson-databind:2.4.1
Fasterxml » Jackson-Databind » Version: 2.4.1.1

cpe:2.3:a:fasterxml:jackson-databind:2.4.1.1
Fasterxml » Jackson-Databind » Version: 2.4.1.2

cpe:2.3:a:fasterxml:jackson-databind:2.4.1.2
Fasterxml » Jackson-Databind » Version: 2.4.1.3

cpe:2.3:a:fasterxml:jackson-databind:2.4.1.3
Fasterxml » Jackson-Databind » Version: 2.4.2

cpe:2.3:a:fasterxml:jackson-databind:2.4.2
Fasterxml » Jackson-Databind » Version: 2.4.3

cpe:2.3:a:fasterxml:jackson-databind:2.4.3
Fasterxml » Jackson-Databind » Version: 2.4.4

cpe:2.3:a:fasterxml:jackson-databind:2.4.4
Fasterxml » Jackson-Databind » Version: 2.4.5

cpe:2.3:a:fasterxml:jackson-databind:2.4.5
Fasterxml » Jackson-Databind » Version: 2.4.5.1

cpe:2.3:a:fasterxml:jackson-databind:2.4.5.1
Fasterxml » Jackson-Databind » Version: 2.4.6

cpe:2.3:a:fasterxml:jackson-databind:2.4.6
Fasterxml » Jackson-Databind » Version: 2.4.6.1

cpe:2.3:a:fasterxml:jackson-databind:2.4.6.1
Fasterxml » Jackson-Databind » Version: 2.5.0

cpe:2.3:a:fasterxml:jackson-databind:2.5.0
Fasterxml » Jackson-Databind » Version: 2.5.1

cpe:2.3:a:fasterxml:jackson-databind:2.5.1
Fasterxml » Jackson-Databind » Version: 2.5.2

cpe:2.3:a:fasterxml:jackson-databind:2.5.2
Fasterxml » Jackson-Databind » Version: 2.5.3

cpe:2.3:a:fasterxml:jackson-databind:2.5.3
Fasterxml » Jackson-Databind » Version: 2.5.4

cpe:2.3:a:fasterxml:jackson-databind:2.5.4
Fasterxml » Jackson-Databind » Version: 2.5.5

cpe:2.3:a:fasterxml:jackson-databind:2.5.5
Fasterxml » Jackson-Databind » Version: 2.6.0

cpe:2.3:a:fasterxml:jackson-databind:2.6.0
Fasterxml » Jackson-Databind » Version: 2.6.1

cpe:2.3:a:fasterxml:jackson-databind:2.6.1
Fasterxml » Jackson-Databind » Version: 2.6.2

cpe:2.3:a:fasterxml:jackson-databind:2.6.2
Fasterxml » Jackson-Databind » Version: 2.6.3

cpe:2.3:a:fasterxml:jackson-databind:2.6.3
Fasterxml » Jackson-Databind » Version: 2.6.4

cpe:2.3:a:fasterxml:jackson-databind:2.6.4
Fasterxml » Jackson-Databind » Version: 2.6.5

cpe:2.3:a:fasterxml:jackson-databind:2.6.5
Fasterxml » Jackson-Databind » Version: 2.6.6

cpe:2.3:a:fasterxml:jackson-databind:2.6.6
Fasterxml » Jackson-Databind » Version: 2.6.7

cpe:2.3:a:fasterxml:jackson-databind:2.6.7
Fasterxml » Jackson-Databind » Version: 2.6.7.1

cpe:2.3:a:fasterxml:jackson-databind:2.6.7.1
Fasterxml » Jackson-Databind » Version: 2.6.7.2

cpe:2.3:a:fasterxml:jackson-databind:2.6.7.2
Fasterxml » Jackson-Databind » Version: 2.7.0

cpe:2.3:a:fasterxml:jackson-databind:2.7.0
Fasterxml » Jackson-Databind » Version: 2.7.1

cpe:2.3:a:fasterxml:jackson-databind:2.7.1
Fasterxml » Jackson-Databind » Version: 2.7.1-1

cpe:2.3:a:fasterxml:jackson-databind:2.7.1-1
Fasterxml » Jackson-Databind » Version: 2.7.2

cpe:2.3:a:fasterxml:jackson-databind:2.7.2
Fasterxml » Jackson-Databind » Version: 2.7.3

cpe:2.3:a:fasterxml:jackson-databind:2.7.3
Fasterxml » Jackson-Databind » Version: 2.7.4

cpe:2.3:a:fasterxml:jackson-databind:2.7.4
Fasterxml » Jackson-Databind » Version: 2.7.5

cpe:2.3:a:fasterxml:jackson-databind:2.7.5
Fasterxml » Jackson-Databind » Version: 2.7.6

cpe:2.3:a:fasterxml:jackson-databind:2.7.6
Fasterxml » Jackson-Databind » Version: 2.7.7

cpe:2.3:a:fasterxml:jackson-databind:2.7.7
Fasterxml » Jackson-Databind » Version: 2.7.8

cpe:2.3:a:fasterxml:jackson-databind:2.7.8
Fasterxml » Jackson-Databind » Version: 2.7.9

cpe:2.3:a:fasterxml:jackson-databind:2.7.9
Fasterxml » Jackson-Databind » Version: 2.7.9.1

cpe:2.3:a:fasterxml:jackson-databind:2.7.9.1
Fasterxml » Jackson-Databind » Version: 2.7.9.2

cpe:2.3:a:fasterxml:jackson-databind:2.7.9.2
Fasterxml » Jackson-Databind » Version: 2.7.9.3

cpe:2.3:a:fasterxml:jackson-databind:2.7.9.3
Fasterxml » Jackson-Databind » Version: 2.7.9.4

cpe:2.3:a:fasterxml:jackson-databind:2.7.9.4
Fasterxml » Jackson-Databind » Version: 2.7.9.5

cpe:2.3:a:fasterxml:jackson-databind:2.7.9.5
Fasterxml » Jackson-Databind » Version: 2.7.9.6

cpe:2.3:a:fasterxml:jackson-databind:2.7.9.6
Fasterxml » Jackson-Databind » Version: 2.7.9.7

cpe:2.3:a:fasterxml:jackson-databind:2.7.9.7
Fasterxml » Jackson-Databind » Version: 2.8.0

cpe:2.3:a:fasterxml:jackson-databind:2.8.0
Fasterxml » Jackson-Databind » Version: 2.8.1

cpe:2.3:a:fasterxml:jackson-databind:2.8.1
Fasterxml » Jackson-Databind » Version: 2.8.10

cpe:2.3:a:fasterxml:jackson-databind:2.8.10
Fasterxml » Jackson-Databind » Version: 2.8.11

cpe:2.3:a:fasterxml:jackson-databind:2.8.11
Fasterxml » Jackson-Databind » Version: 2.8.11.1

cpe:2.3:a:fasterxml:jackson-databind:2.8.11.1
Fasterxml » Jackson-Databind » Version: 2.8.11.2

cpe:2.3:a:fasterxml:jackson-databind:2.8.11.2
Fasterxml » Jackson-Databind » Version: 2.8.11.3

cpe:2.3:a:fasterxml:jackson-databind:2.8.11.3
Fasterxml » Jackson-Databind » Version: 2.8.11.4

cpe:2.3:a:fasterxml:jackson-databind:2.8.11.4
Fasterxml » Jackson-Databind » Version: 2.8.2

cpe:2.3:a:fasterxml:jackson-databind:2.8.2
Fasterxml » Jackson-Databind » Version: 2.8.3

cpe:2.3:a:fasterxml:jackson-databind:2.8.3
Fasterxml » Jackson-Databind » Version: 2.8.4

cpe:2.3:a:fasterxml:jackson-databind:2.8.4
Fasterxml » Jackson-Databind » Version: 2.8.5

cpe:2.3:a:fasterxml:jackson-databind:2.8.5
Fasterxml » Jackson-Databind » Version: 2.8.6

cpe:2.3:a:fasterxml:jackson-databind:2.8.6
Fasterxml » Jackson-Databind » Version: 2.8.7

cpe:2.3:a:fasterxml:jackson-databind:2.8.7
Fasterxml » Jackson-Databind » Version: 2.8.8

cpe:2.3:a:fasterxml:jackson-databind:2.8.8
Fasterxml » Jackson-Databind » Version: 2.8.8.1

cpe:2.3:a:fasterxml:jackson-databind:2.8.8.1
Fasterxml » Jackson-Databind » Version: 2.8.9

cpe:2.3:a:fasterxml:jackson-databind:2.8.9
Fasterxml » Jackson-Databind » Version: 2.9.0

cpe:2.3:a:fasterxml:jackson-databind:2.9.0
Fasterxml » Jackson-Databind » Version: 2.9.1

cpe:2.3:a:fasterxml:jackson-databind:2.9.1
Fasterxml » Jackson-Databind » Version: 2.9.10

cpe:2.3:a:fasterxml:jackson-databind:2.9.10
Fasterxml » Jackson-Databind » Version: 2.9.2

cpe:2.3:a:fasterxml:jackson-databind:2.9.2
Fasterxml » Jackson-Databind » Version: 2.9.3

cpe:2.3:a:fasterxml:jackson-databind:2.9.3
Fasterxml » Jackson-Databind » Version: 2.9.4

cpe:2.3:a:fasterxml:jackson-databind:2.9.4
Fasterxml » Jackson-Databind » Version: 2.9.5

cpe:2.3:a:fasterxml:jackson-databind:2.9.5
Fasterxml » Jackson-Databind » Version: 2.9.6

cpe:2.3:a:fasterxml:jackson-databind:2.9.6
Fasterxml » Jackson-Databind » Version: 2.9.7

cpe:2.3:a:fasterxml:jackson-databind:2.9.7
Fasterxml » Jackson-Databind » Version: 2.9.8

cpe:2.3:a:fasterxml:jackson-databind:2.9.8
Fasterxml » Jackson-Databind » Version: 2.9.9

cpe:2.3:a:fasterxml:jackson-databind:2.9.9
Fasterxml » Jackson-Databind » Version: 2.9.9.1

cpe:2.3:a:fasterxml:jackson-databind:2.9.9.1
Fasterxml » Jackson-Databind » Version: 2.9.9.2

cpe:2.3:a:fasterxml:jackson-databind:2.9.9.2
Fasterxml » Jackson-Databind » Version: 2.9.9.3

cpe:2.3:a:fasterxml:jackson-databind:2.9.9.3
Fasterxml » Jackson-Databind » Version: 2.9.9.4

cpe:2.3:a:fasterxml:jackson-databind:2.9.9.4
Netapp » Active Iq Unified Manager » Version: 7.3

cpe:2.3:a:netapp:active_iq_unified_manager:7.3
Netapp » Active Iq Unified Manager » Version: 9.10

cpe:2.3:a:netapp:active_iq_unified_manager:9.10
Netapp » Active Iq Unified Manager » Version: 9.11p1

cpe:2.3:a:netapp:active_iq_unified_manager:9.11p1
Netapp » Active Iq Unified Manager » Version: 9.5

cpe:2.3:a:netapp:active_iq_unified_manager:9.5
Netapp » Active Iq Unified Manager » Version: 9.6

cpe:2.3:a:netapp:active_iq_unified_manager:9.6
Netapp » Oncommand Api Services » Version: N/A

cpe:2.3:a:netapp:oncommand_api_services:-
Netapp » Oncommand Workflow Automation » Version: N/A

cpe:2.3:a:netapp:oncommand_workflow_automation:-
Netapp » Service Level Manager » Version: N/A

cpe:2.3:a:netapp:service_level_manager:-
Netapp » Steelstore Cloud Integrated Storage » Version: N/A

cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-
Oracle » Banking Platform » Version: 2.4.0

cpe:2.3:a:oracle:banking_platform:2.4.0
Oracle » Banking Platform » Version: 2.4.1

cpe:2.3:a:oracle:banking_platform:2.4.1
Oracle » Banking Platform » Version: 2.5.0

cpe:2.3:a:oracle:banking_platform:2.5.0
Oracle » Banking Platform » Version: 2.6.0

cpe:2.3:a:oracle:banking_platform:2.6.0
Oracle » Banking Platform » Version: 2.6.1

cpe:2.3:a:oracle:banking_platform:2.6.1
Oracle » Banking Platform » Version: 2.6.2

cpe:2.3:a:oracle:banking_platform:2.6.2
Oracle » Banking Platform » Version: 2.7.0

cpe:2.3:a:oracle:banking_platform:2.7.0
Oracle » Banking Platform » Version: 2.7.1

cpe:2.3:a:oracle:banking_platform:2.7.1
Oracle » Banking Platform » Version: 2.9.0

cpe:2.3:a:oracle:banking_platform:2.9.0
Oracle » Communications Billing And Revenue Management » Version: 12.0.0.3.0

cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0
Oracle » Communications Billing And Revenue Management » Version: 7.5.0.23.0

cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0
Oracle » Communications Calendar Server » Version: 8.0.0.2.0

cpe:2.3:a:oracle:communications_calendar_server:8.0.0.2.0
Oracle » Communications Calendar Server » Version: 8.0.0.3.0

cpe:2.3:a:oracle:communications_calendar_server:8.0.0.3.0
Oracle » Communications Cloud Native Core Network Slice Selection Function » Version: 1.2.1

cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.2.1
Oracle » Communications Evolved Communications Application Server » Version: 7.1

cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1
Oracle » Global Lifecycle Management Nextgen Oui Framework » Version: 12.2.1.3.0

cpe:2.3:a:oracle:global_lifecycle_management_nextgen_oui_framework:12.2.1.3.0
Oracle » Global Lifecycle Management Nextgen Oui Framework » Version: 12.2.1.4.0

cpe:2.3:a:oracle:global_lifecycle_management_nextgen_oui_framework:12.2.1.4.0
Oracle » Global Lifecycle Management Nextgen Oui Framework » Version: 13.9.4.2.2

cpe:2.3:a:oracle:global_lifecycle_management_nextgen_oui_framework:13.9.4.2.2
Oracle » Goldengate Application Adapters » Version: 19.1.0.0.0

cpe:2.3:a:oracle:goldengate_application_adapters:19.1.0.0.0
Oracle » Jd Edwards Enterpriseone Orchestrator » Version: 9.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:9.2
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2
Oracle » Primavera Gateway » Version: 16.1

cpe:2.3:a:oracle:primavera_gateway:16.1
Oracle » Primavera Gateway » Version: 16.2

cpe:2.3:a:oracle:primavera_gateway:16.2
Oracle » Primavera Gateway » Version: 17.12

cpe:2.3:a:oracle:primavera_gateway:17.12
Oracle » Primavera Gateway » Version: 17.12.0

cpe:2.3:a:oracle:primavera_gateway:17.12.0
Oracle » Primavera Gateway » Version: 17.12.6

cpe:2.3:a:oracle:primavera_gateway:17.12.6
Oracle » Primavera Gateway » Version: 17.7

cpe:2.3:a:oracle:primavera_gateway:17.7
Oracle » Primavera Gateway » Version: 18.8.0

cpe:2.3:a:oracle:primavera_gateway:18.8.0
Oracle » Primavera Gateway » Version: 18.8.8

cpe:2.3:a:oracle:primavera_gateway:18.8.8
Oracle » Primavera Gateway » Version: 19.12.0

cpe:2.3:a:oracle:primavera_gateway:19.12.0
Oracle » Retail Merchandising System » Version: 15.0.3

cpe:2.3:a:oracle:retail_merchandising_system:15.0.3
Oracle » Retail Merchandising System » Version: 16.0.2

cpe:2.3:a:oracle:retail_merchandising_system:16.0.2
Oracle » Retail Merchandising System » Version: 16.0.3

cpe:2.3:a:oracle:retail_merchandising_system:16.0.3
Oracle » Retail Sales Audit » Version: 14.1

cpe:2.3:a:oracle:retail_sales_audit:14.1
Oracle » Siebel Engineering - Installer & Deployment » Version: N/A

cpe:2.3:a:oracle:siebel_engineering_-_installer_&_deployment:-
Oracle » Siebel Engineering - Installer & Deployment » Version: 2.1.1

cpe:2.3:a:oracle:siebel_engineering_-_installer_&_deployment:2.1.1
Oracle » Siebel Engineering - Installer & Deployment » Version: 2.20.5

cpe:2.3:a:oracle:siebel_engineering_-_installer_&_deployment:2.20.5
Oracle » Trace File Analyzer » Version: 12.2.0.1

cpe:2.3:a:oracle:trace_file_analyzer:12.2.0.1
Oracle » Trace File Analyzer » Version: 18c

cpe:2.3:a:oracle:trace_file_analyzer:18c
Oracle » Trace File Analyzer » Version: 19c

cpe:2.3:a:oracle:trace_file_analyzer:19c
Oracle » Webcenter Portal » Version: 12.2.1.3.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0
Oracle » Webcenter Portal » Version: 12.2.1.4.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0
Oracle » Webcenter Sites » Version: 12.2.1.3.0

cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0
Oracle » Webcenter Sites » Version: 12.2.1.4.0

cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0
Oracle » Weblogic Server » Version: 12.2.1.3.0

cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0
Oracle » Weblogic Server » Version: 12.2.1.4.0

cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0
Redhat » Jboss Enterprise Application Platform » Version: 7.2

cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2
Redhat » Jboss Enterprise Application Platform » Version: 7.3

cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Fedoraproject » Fedora » Version: 31

cpe:2.3:o:fedoraproject:fedora:31
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux_server:8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-16943

Products

Pricing

Contact Us