● CVE — High
CVE-2019-14439
Vendordebian, fedoraproject, fasterxml, oracle, redhatProductdebian linux, fedora, jackson-databind, jd edwards enterpriseone tools, financial services analytical applications infrastructure, banking platform, communications diameter signaling router, communications instant messaging server, retail xstore point of service, goldengate stream analytics, primavera gateway, jboss middleware text-only advisories, siebel ui framework, global lifecycle management opatch, jd edwards enterpriseone orchestrator, retail customer management and segmentation foundation, siebel engineering - installer & deployment, drillDiscoveredJul 30, 2019UpdatedNov 21, 2024
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.