CVE-2019-14540

—

CVSS 3.1

9.8 critical

EPSS

11%p96

Published

Sep 15, 2019 (Sep 15, 2019)

Modified

Jun 17, 2026

Description

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

Vendors: fasterxml netapp fedoraproject debian redhat oracle
Products: jackson-databind, oncommand api services, oncommand workflow automation, steelstore cloud integrated storage, fedora, debian linux, jboss enterprise application platform, banking platform, customer management and segmentation foundation, financial services analytical applications infrastructure, global lifecycle management opatch, goldengate application adapters
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (10.8%)

In the news0 stories

No ingested article mentions this CVE yet.