AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2018-14719.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSCRITICAL / 9.8CVSS 3.1 · nvd@nist.gov
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 08, 2026

Disclosure summary

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.

Source-reported weakness categories

CWE-502

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2018-14719

Open original source · Updated Oct 08, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
fasterxmljackson-databind* {"versionStartIncluding":"2.9.0","versionEndExcluding":"2.9.7"}
debiandebian_linux8.0
debiandebian_linux9.0
oraclebanking_platform2.5.0
oraclebanking_platform2.6.0
oraclebanking_platform2.6.1
oraclebanking_platform2.6.2
oraclebusiness_process_management_suite12.1.3.0.0
oraclebusiness_process_management_suite12.2.1.3.0
oracleclusterware12.1.0.2.0
oraclecommunications_billing_and_revenue_management7.5
oraclecommunications_billing_and_revenue_management12.0
oracledatabase_server11.2.0.4
oracledatabase_server12.1.0.2
oracledatabase_server12.2.0.1
oracledatabase_server18c
oracledatabase_server19c
oracleenterprise_manager_for_virtualization13.2.2
oracleenterprise_manager_for_virtualization13.2.3
oracleenterprise_manager_for_virtualization13.3.1
oraclefinancial_services_analytical_applications_infrastructure8.0.2
oraclefinancial_services_analytical_applications_infrastructure8.0.3
oraclefinancial_services_analytical_applications_infrastructure8.0.4
oraclefinancial_services_analytical_applications_infrastructure8.0.5
oraclefinancial_services_analytical_applications_infrastructure8.0.6
oraclefinancial_services_analytical_applications_infrastructure8.0.7
oracleglobal_lifecycle_management_opatch* {"versionStartIncluding":"13.9.4.0.0","versionEndExcluding":"13.9.4.2.1"}
oraclejdeveloper12.1.3.0.0
oraclejdeveloper12.2.1.3.0
oracleprimavera_p6_enterprise_project_portfolio_management* {"versionStartIncluding":"17.7","versionEndIncluding":"17.12"}
oracleprimavera_p6_enterprise_project_portfolio_management15.1
oracleprimavera_p6_enterprise_project_portfolio_management15.2
oracleprimavera_p6_enterprise_project_portfolio_management16.1
oracleprimavera_p6_enterprise_project_portfolio_management16.2
oracleprimavera_p6_enterprise_project_portfolio_management18.8
oracleprimavera_unifier* {"versionStartIncluding":"17.7","versionEndIncluding":"17.12"}
oracleprimavera_unifier16.1
oracleprimavera_unifier16.2
oracleprimavera_unifier18.8
oracleretail_merchandising_system15.0
oracleretail_merchandising_system16.0
oracleretail_workforce_management_software1.60.9.0.0
oraclewebcenter_portal12.2.1.3.0
redhatopenshift_container_platform* {"versionStartIncluding":"4.1","versionEndExcluding":"4.1.18"}
netapponcommand_workflow_automation-
netappsnapcenter-
netappsteelstore_cloud_integrated_storage*

Original records & references

PUBLISHED 2019-01-02T13:29:00-05:00
MODIFIED 2026-10-08T17:17:08-04:00
INGESTED 2026-10-10T20:50:18-04:00