AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2018-14718.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSCRITICAL / 9.8CVSS 3.1 · nvd@nist.gov
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 08, 2026

Disclosure summary

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.

Source-reported weakness categories

CWE-502

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2018-14718

Open original source · Updated Oct 08, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
fasterxmljackson-databind* {"versionStartIncluding":"2.9.0","versionEndExcluding":"2.9.7"}
debiandebian_linux8.0
debiandebian_linux9.0
oraclebanking_platform2.5.0
oraclebanking_platform2.6.0
oraclebanking_platform2.6.1
oraclebanking_platform2.6.2
oraclebusiness_process_management_suite12.1.3.0.0
oraclebusiness_process_management_suite12.2.1.3.0
oraclecommunications_billing_and_revenue_management7.5
oraclecommunications_billing_and_revenue_management12.0
oraclecommunications_instant_messaging_server10.0.1.3.0
oracleenterprise_manager_for_virtualization13.2.2
oracleenterprise_manager_for_virtualization13.2.3
oracleenterprise_manager_for_virtualization13.3.1
oraclefinancial_services_analytical_applications_infrastructure8.0.2
oraclefinancial_services_analytical_applications_infrastructure8.0.3
oraclefinancial_services_analytical_applications_infrastructure8.0.4
oraclefinancial_services_analytical_applications_infrastructure8.0.5
oraclefinancial_services_analytical_applications_infrastructure8.0.6
oraclefinancial_services_analytical_applications_infrastructure8.0.7
oracleglobal_lifecycle_management_opatch* {"versionStartIncluding":"13.9.4.0.0","versionEndExcluding":"13.9.4.2.1"}
oraclejd_edwards_enterpriseone_orchestrator9.2
oraclejd_edwards_enterpriseone_tools9.2
oraclejdeveloper12.1.3.0.0
oraclejdeveloper12.2.1.3.0
oraclenosql_database* {"versionEndExcluding":"19.3.12"}
oraclenosql_database19.3.12
oracleprimavera_p6_enterprise_project_portfolio_management* {"versionStartIncluding":"17.7","versionEndIncluding":"17.12"}
oracleprimavera_p6_enterprise_project_portfolio_management15.1
oracleprimavera_p6_enterprise_project_portfolio_management15.2
oracleprimavera_p6_enterprise_project_portfolio_management16.1
oracleprimavera_p6_enterprise_project_portfolio_management16.2
oracleprimavera_p6_enterprise_project_portfolio_management18.8
oracleprimavera_unifier* {"versionStartIncluding":"17.7","versionEndIncluding":"17.12"}
oracleprimavera_unifier16.1
oracleprimavera_unifier16.2
oracleprimavera_unifier18.8
oracleretail_customer_management_and_segmentation_foundation17.0
oracleretail_merchandising_system15.0
oracleretail_merchandising_system16.0
oracleretail_workforce_management_software1.60.9.0.0
oraclesiebel_engineering_-_installer_&_deployment* {"versionEndIncluding":"19.8"}
oraclesiebel_ui_framework* {"versionEndIncluding":"19.10"}
oraclewebcenter_portal12.2.1.3.0
netapponcommand_workflow_automation-
netappsnapcenter-
netappsteelstore_cloud_integrated_storage-
redhatopenshift_container_platform* {"versionStartIncluding":"4.1","versionEndExcluding":"4.1.18"}
redhatopenshift_container_platform3.10

Original records & references

PUBLISHED 2019-01-02T13:29:00-05:00
MODIFIED 2026-10-08T17:17:08-04:00
INGESTED 2026-10-10T20:50:18-04:00