ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-19361

—
CVSS 3.0
9.8 critical
EPSS
11%p96
Published
()
Modified
Description

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.

Vendors
fasterxmldebianoracleredhat
Products
jackson-databind, debian linux, business process management suite, primavera p6 enterprise project portfolio management, primavera unifier, retail workforce management software, webcenter portal, automation manager, decision manager, jboss bpm suite, jboss brms, openshift container platform
Weakness
CWE-502
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (10.6%)

In the news

No ingested article mentions this CVE yet.