AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2019-14439.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSHIGH / 7.5CVSS 3.1 · nvd@nist.gov
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 08, 2026

Disclosure summary

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.

Source-reported weakness categories

CWE-502

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2019-14439

Open original source · Updated Oct 08, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
fasterxmljackson-databind* {"versionStartIncluding":"2.9.0","versionEndExcluding":"2.9.9.2"}
debiandebian_linux8.0
debiandebian_linux9.0
debiandebian_linux10.0
fedoraprojectfedora29
fedoraprojectfedora30
apachedrill1.16.0
redhatjboss_middleware_text-only_advisories1.0
oraclebanking_platform2.4.0
oraclebanking_platform2.4.1
oraclebanking_platform2.5.0
oraclebanking_platform2.6.0
oraclebanking_platform2.6.1
oraclebanking_platform2.7.0
oraclebanking_platform2.7.1
oraclecommunications_diameter_signaling_router8.0.0
oraclecommunications_diameter_signaling_router8.1
oraclecommunications_diameter_signaling_router8.2
oraclecommunications_diameter_signaling_router8.2.1
oraclecommunications_instant_messaging_server10.0.1.3.0
oraclefinancial_services_analytical_applications_infrastructure* {"versionStartIncluding":"8.0.2","versionEndIncluding":"8.0.8"}
oracleglobal_lifecycle_management_opatch* {"versionStartIncluding":"13.9.4.0.0","versionEndExcluding":"13.9.4.2.1"}
oracleglobal_lifecycle_management_opatch11.2.0.3.23
oracleglobal_lifecycle_management_opatch13.9.4.2.1
oraclegoldengate_stream_analytics* {"versionEndExcluding":"19.1.0.0.1"}
oraclejd_edwards_enterpriseone_orchestrator9.2
oraclejd_edwards_enterpriseone_tools9.2
oracleprimavera_gateway* {"versionStartIncluding":"17.7","versionEndIncluding":"17.12"}
oracleprimavera_gateway15.2
oracleprimavera_gateway16.1
oracleprimavera_gateway16.2
oracleprimavera_gateway18.8.0
oracleretail_customer_management_and_segmentation_foundation17.0
oracleretail_xstore_point_of_service7.1
oracleretail_xstore_point_of_service15.0
oracleretail_xstore_point_of_service16.0
oracleretail_xstore_point_of_service17.0
oracleretail_xstore_point_of_service18.0
oraclesiebel_engineering_-_installer_&_deployment* {"versionEndIncluding":"19.8"}
oraclesiebel_ui_framework* {"versionEndIncluding":"19.10"}

Original records & references

PUBLISHED 2019-07-30T07:15:11-04:00
MODIFIED 2026-10-08T17:17:13-04:00
INGESTED 2026-10-10T20:50:18-04:00