Search/CVE-2019-14540
● CVE — Critical

CVE-2019-14540

Vendorredhat, debian, fedoraproject, fasterxml, netappProductjboss enterprise application platform, debian linux, fedora, jackson-databind, oncommand workflow automation, mysql, primavera unifier, weblogic server, financial services analytical applications infrastructure, banking platform, steelstore cloud integrated storage, oncommand api services, retail xstore point of service, goldengate application adapters, goldengate stream analytics, primavera gateway, customer management and segmentation foundation, global lifecycle management opatch, retail customer management and segmentation foundationDiscoveredSep 15, 2019UpdatedNov 21, 2024

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

CVSS v3.1
9.8 CRITICAL
EPSS
10.8%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
Sep 15, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024
Public PoC (1)
Unverified third-party code — review before executing.