ZeroDay Findings
Sign inSign up

Findings

CVE-2018-19361

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.

Published Jan 2, 2019 · updated Oct 15, 2026 · fasterxml jackson-databind

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 2, 2019 · NIST NVD

    Detected

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.

  2. Oct 15, 2026 · NIST NVD

    Updated

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.

Affected

  • cpe debian/debian linux8.0
  • cpe debian/debian linux9.0
  • cpe fasterxml/jackson-databindversion unspecified
  • cpe oracle/business process management suite12.1.3.0.0
  • cpe oracle/business process management suite12.2.1.3.0
  • cpe redhat/automation manager7.3.1

Sources

  • CVE.orgVulnerability recordCVE-2018-19361

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2018-19361

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.

    nvd.nist.gov

References