AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2019-16942.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSCRITICAL / 9.8CVSS 3.1 · nvd@nist.gov
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 08, 2026

Disclosure summary

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.

Source-reported weakness categories

CWE-502

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2019-16942

Open original source · Updated Oct 08, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
fasterxmljackson-databind* {"versionStartIncluding":"2.9.0","versionEndExcluding":"2.9.10.1"}
debiandebian_linux8.0
debiandebian_linux9.0
debiandebian_linux10.0
fedoraprojectfedora30
fedoraprojectfedora31
redhatjboss_enterprise_application_platform7.2.0
redhatjboss_enterprise_application_platform7.3
netappactive_iq_unified_manager* {"versionStartIncluding":"7.3"}
netappactive_iq_unified_manager* {"versionStartIncluding":"7.3"}
netappactive_iq_unified_manager* {"versionStartIncluding":"9.5"}
netapponcommand_api_services-
netapponcommand_workflow_automation-
netappservice_level_manager-
netappsteelstore_cloud_integrated_storage-
oraclebanking_platform2.4.0
oraclebanking_platform2.4.1
oraclebanking_platform2.5.0
oraclebanking_platform2.6.0
oraclebanking_platform2.6.1
oraclebanking_platform2.6.2
oraclebanking_platform2.7.0
oraclebanking_platform2.7.1
oraclebanking_platform2.9.0
oraclecommunications_billing_and_revenue_management7.5.0.23.0
oraclecommunications_billing_and_revenue_management12.0.0.3.0
oraclecommunications_calendar_server8.0.0.2.0
oraclecommunications_calendar_server8.0.0.3.0
oraclecommunications_cloud_native_core_network_slice_selection_function1.2.1
oraclecommunications_evolved_communications_application_server7.1
oracledatabase_server12.2.0.1
oracledatabase_server18c
oracledatabase_server19c
oracleglobal_lifecycle_management_nextgen_oui_framework12.2.1.3.0
oracleglobal_lifecycle_management_nextgen_oui_framework12.2.1.4.0
oracleglobal_lifecycle_management_nextgen_oui_framework13.9.4.2.2
oraclegoldengate_application_adapters19.1.0.0.0
oraclejd_edwards_enterpriseone_orchestrator9.2
oraclejd_edwards_enterpriseone_tools9.2
oracleprimavera_gateway* {"versionStartIncluding":"18.8.0","versionEndIncluding":"18.8.8"}
oracleprimavera_gateway19.12.0
oracleprimavera_unifier* {"versionStartIncluding":"17.7","versionEndIncluding":"17.12"}
oracleprimavera_unifier16.1
oracleprimavera_unifier16.2
oracleprimavera_unifier18.8
oracleprimavera_unifier19.12
oracleretail_merchandising_system15.0.3
oracleretail_merchandising_system16.0.2
oracleretail_merchandising_system16.0.3
oracleretail_sales_audit14.1
oraclesiebel_engineering_-_installer_&_deployment* {"versionEndIncluding":"2.20.5"}
oraclesiebel_ui_framework* {"versionEndIncluding":"20.5"}
oraclesiebel_ui_framework20.6
oraclewebcenter_portal12.2.1.3.0
oraclewebcenter_portal12.2.1.4.0
oraclewebcenter_sites12.2.1.3.0
oraclewebcenter_sites12.2.1.4.0
oracleweblogic_server12.2.1.3.0
oracleweblogic_server12.2.1.4.0

Original records & references

PUBLISHED 2019-10-01T13:15:10-04:00
MODIFIED 2026-10-08T17:17:16-04:00
INGESTED 2026-10-10T20:50:18-04:00