ZeroDay Findings
Sign inSign up

Findings

CVE-2018-19360

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorp…

Published Jan 2, 2019 · updated Oct 15, 2026 · fasterxml jackson-databind

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 2, 2019 · NIST NVD

    Detected

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.

  2. Oct 15, 2026 · NIST NVD

    Updated

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.

Affected

  • cpe debian/debian linux8.0
  • cpe fasterxml/jackson-databindversion unspecified
  • cpe oracle/business process management suite12.1.3.0.0
  • cpe oracle/business process management suite12.2.1.3.0
  • cpe oracle/primavera p6 enterprise project portfolio managementversion unspecified
  • cpe redhat/automation manager7.3.1

Sources

  • CVE.orgVulnerability recordCVE-2018-19360

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2018-19360

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.

    nvd.nist.gov

References

CVE-2018-19360 · ZeroDay Findings