Disclosure summary
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
Source-reported weakness categories
CWE-502
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
NIST National Vulnerability Database · NVD-CVE-2019-14540
Open original source · Updated Oct 08, 2026
Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.
| Vendor | Product / association | Version / bounds |
|---|---|---|
| fasterxml | jackson-databind | * {"versionStartIncluding":"2.9.0","versionEndExcluding":"2.9.10"} |
| netapp | oncommand_api_services | - |
| netapp | oncommand_workflow_automation | - |
| netapp | steelstore_cloud_integrated_storage | - |
| fedoraproject | fedora | 30 |
| fedoraproject | fedora | 31 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
| redhat | jboss_enterprise_application_platform | 7.2 |
| redhat | jboss_enterprise_application_platform | 7.3 |
| oracle | banking_platform | 2.4.0 |
| oracle | banking_platform | 2.4.1 |
| oracle | banking_platform | 2.5.0 |
| oracle | banking_platform | 2.6.0 |
| oracle | banking_platform | 2.6.1 |
| oracle | banking_platform | 2.7.0 |
| oracle | banking_platform | 2.7.1 |
| oracle | customer_management_and_segmentation_foundation | 18.0 |
| oracle | financial_services_analytical_applications_infrastructure | * {"versionStartIncluding":"8.0.2","versionEndIncluding":"8.0.8"} |
| oracle | global_lifecycle_management_opatch | * {"versionStartIncluding":"13.9.4.0.0","versionEndExcluding":"13.9.4.2.1"} |
| oracle | goldengate_application_adapters | 19.1.0.0.0 |
| oracle | goldengate_stream_analytics | * {"versionEndExcluding":"19.1.0.0.1"} |
| oracle | mysql | * {"versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.20"} |
| oracle | primavera_gateway | 15.2 |
| oracle | primavera_gateway | 15.2.18 |
| oracle | primavera_gateway | 16.2 |
| oracle | primavera_gateway | 16.2.11 |
| oracle | primavera_gateway | 17.12 |
| oracle | primavera_gateway | 17.12.6 |
| oracle | primavera_gateway | 18.8.0 |
| oracle | primavera_gateway | 18.8.8.1 |
| oracle | primavera_unifier | * {"versionStartIncluding":"17.7","versionEndIncluding":"17.12"} |
| oracle | primavera_unifier | 16.1 |
| oracle | primavera_unifier | 16.2 |
| oracle | primavera_unifier | 18.8 |
| oracle | primavera_unifier | 19.12 |
| oracle | retail_customer_management_and_segmentation_foundation | 17.0 |
| oracle | retail_xstore_point_of_service | 7.1 |
| oracle | retail_xstore_point_of_service | 15.0 |
| oracle | retail_xstore_point_of_service | 16.0 |
| oracle | retail_xstore_point_of_service | 17.0 |
| oracle | retail_xstore_point_of_service | 18.0 |
| oracle | weblogic_server | 12.2.1.3.0 |
Original records & references
- NIST NVD record
- CVE Program record
- access.redhat.com — Third Party Advisory
- access.redhat.com — Third Party Advisory
- access.redhat.com — Third Party Advisory
- access.redhat.com — Third Party Advisory
- access.redhat.com — Third Party Advisory
- access.redhat.com — Third Party Advisory
- github.com — Release Notes, Third Party Advisory
- github.com — Patch, Third Party Advisory
- github.com — Patch, Third Party Advisory
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.debian.org — Mailing List, Third Party Advisory
- lists.fedoraproject.org
- lists.fedoraproject.org
- seclists.org — Mailing List, Third Party Advisory
- security.netapp.com — Third Party Advisory
- www.debian.org — Third Party Advisory
- www.oracle.com — Third Party Advisory
- www.oracle.com — Third Party Advisory
- www.oracle.com — Third Party Advisory
- www.oracle.com — Third Party Advisory
- www.oracle.com — Patch, Third Party Advisory
- access.redhat.com — Third Party Advisory
- access.redhat.com — Third Party Advisory
- access.redhat.com — Third Party Advisory
- access.redhat.com — Third Party Advisory
- access.redhat.com — Third Party Advisory
- access.redhat.com — Third Party Advisory
- github.com — Release Notes, Third Party Advisory
- github.com — Patch, Third Party Advisory
- github.com — Patch, Third Party Advisory
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.debian.org — Mailing List, Third Party Advisory
- lists.fedoraproject.org
- lists.fedoraproject.org
- seclists.org — Mailing List, Third Party Advisory
- security.netapp.com — Third Party Advisory
- www.debian.org — Third Party Advisory
- www.oracle.com — Third Party Advisory
- www.oracle.com — Third Party Advisory
- www.oracle.com — Third Party Advisory
- www.oracle.com — Third Party Advisory
- www.oracle.com — Patch, Third Party Advisory
PUBLISHED 2019-09-15T18:15:10-04:00
MODIFIED 2026-10-08T17:17:13-04:00
INGESTED 2026-10-10T20:50:18-04:00