BDU%3A2019-01757 — Vulnetix

BDU%3A2019-01757 PUBLISHED CVSS 10 CRITICAL

Уязвимость библиотеки jackson-databind, связанная с восстановленим в памяти недостоверной структуры данных, позволяющая нарушителю выполнить произвольный код

Risk Scores

CVSS 2.0

Affected Products

Vendor	Product	Versions
FasterXML, LLC, Oracle Corp.	Jackson-databind, Oracle Retail Merchandising System, Oracle JDeveloper

Timeline

May 7, 2019 CVE Published
Feb 28, 2023 CVE Updated

References

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html url
https://nvd.nist.gov/vuln/detail/CVE-2018-14719 url
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7 advisory

Open in Interactive Console →