ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-17267

—
CVSS 3.1
9.8 critical
EPSS
5%p91
Published
()
Modified
Description

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.

Vendors
fasterxmlnetappdebianredhatoracle
Products
jackson-databind, active iq unified manager, oncommand api services, oncommand workflow automation, service level manager, steelstore cloud integrated storage, debian linux, jboss enterprise application platform, customer management and segmentation foundation, goldengate application adapters, retail customer management and segmentation foundation, weblogic server
Weakness
CWE-502
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (4.6%)

In the news

No ingested article mentions this CVE yet.