ZeroDay Findings
Sign inSign up

Findings

CVE-2018-19362

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphi…

Published Jan 2, 2019 · updated Oct 15, 2026 · fasterxml jackson-databind

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 2, 2019 · NIST NVD

    Detected

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.

  2. Oct 15, 2026 · NIST NVD

    Updated

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.

Affected

  • cpe debian/debian linux8.0
  • cpe fasterxml/jackson-databindversion unspecified
  • cpe oracle/business process management suite12.1.3.0.0
  • cpe oracle/business process management suite12.2.1.3.0
  • cpe oracle/primavera p6 enterprise project portfolio managementversion unspecified
  • cpe redhat/automation manager7.3.1

Sources

  • CVE.orgVulnerability recordCVE-2018-19362

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2018-19362

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.

    nvd.nist.gov

References