AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2019-14379.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSCRITICAL / 9.8CVSS 3.1 · nvd@nist.gov
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 08, 2026

Disclosure summary

SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.

Source-reported weakness categories

CWE-1321

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2019-14379

Open original source · Updated Oct 08, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
fasterxmljackson-databind* {"versionStartIncluding":"2.9.0","versionEndExcluding":"2.9.9.2"}
debiandebian_linux8.0
netappactive_iq_unified_manager* {"versionStartIncluding":"7.3"}
netappactive_iq_unified_manager* {"versionStartIncluding":"7.3"}
netappactive_iq_unified_manager* {"versionStartIncluding":"9.5"}
netapponcommand_workflow_automation-
netappservice_level_manager-
netappsnapcenter-
fedoraprojectfedora29
fedoraprojectfedora30
fedoraprojectfedora31
redhatjboss_enterprise_application_platform7.2
redhatjboss_enterprise_application_platform7.3
redhatopenshift_container_platform4.1
redhatsingle_sign-on7.3
redhatopenshift_container_platform3.11
oraclebanking_platform2.4.0
oraclebanking_platform2.4.1
oraclebanking_platform2.5.0
oraclebanking_platform2.6.0
oraclebanking_platform2.6.1
oraclebanking_platform2.7.0
oraclebanking_platform2.7.1
oraclecommunications_diameter_signaling_router8.0.0
oraclecommunications_diameter_signaling_router8.1
oraclecommunications_diameter_signaling_router8.2
oraclecommunications_diameter_signaling_router8.2.1
oraclecommunications_instant_messaging_server10.0.1.3.0
oraclefinancial_services_analytical_applications_infrastructure* {"versionStartIncluding":"8.0.2","versionEndIncluding":"8.0.8"}
oraclegoldengate_stream_analytics* {"versionEndExcluding":"19.1.0.0.1"}
oraclejd_edwards_enterpriseone_orchestrator9.2
oraclejd_edwards_enterpriseone_tools9.2
oracleprimavera_gateway15.2
oracleprimavera_gateway16.2
oracleprimavera_gateway17.12
oracleprimavera_gateway18.8.0
oracleprimavera_unifier* {"versionStartIncluding":"17.7","versionEndIncluding":"17.12"}
oracleprimavera_unifier16.1
oracleprimavera_unifier16.2
oracleprimavera_unifier18.8
oracleretail_customer_management_and_segmentation_foundation17.0
oracleretail_xstore_point_of_service7.1
oracleretail_xstore_point_of_service15.0
oracleretail_xstore_point_of_service16.0
oracleretail_xstore_point_of_service17.0
oracleretail_xstore_point_of_service18.0
oraclesiebel_engineering_-_installer_&_deployment* {"versionEndIncluding":"19.8"}
oraclesiebel_ui_framework* {"versionEndIncluding":"19.10"}
applexcode* {"versionEndExcluding":"13.3"}

Original records & references

PUBLISHED 2019-07-29T08:15:16-04:00
MODIFIED 2026-10-08T17:17:12-04:00
INGESTED 2026-10-10T20:50:18-04:00