2019-01-02 19:29:00 2019-09-17 19:15:12

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Redhat Jboss bpm suite 6.4.11 (not an official CPE) Redhat Decision manager 7.3.1 (not an official CPE) Redhat Automation manager 7.3.1 (not an official CPE) Oracle Webcenter portal 12.2.1.3.0 (not an official CPE) Oracle Retail workforce management software 1.60.9.0.0 (not an official CPE) Oracle Primavera unifier 18.8 (not an official CPE) Oracle Primavera unifier 16.2 (not an official CPE) Oracle Primavera unifier 16.1 (not an official CPE) Oracle Primavera p6 enterprise project portfolio management 18.8 (not an official CPE) Oracle Primavera p6 enterprise project portfolio management 16.2 (not an official CPE) Oracle Primavera p6 enterprise project portfolio management 16.1 (not an official CPE) Oracle Primavera p6 enterprise project portfolio management 15.2 (not an official CPE) Oracle Primavera p6 enterprise project portfolio management 15.1 (not an official CPE) Oracle Business process management suite 12.2.1.3.0 (not an official CPE) Oracle Business process management suite 12.1.3.0.0 (not an official CPE) Fasterxml Jackson-databind 2.9.7 (not an official CPE) Fasterxml Jackson-databind 2.9.6 (not an official CPE) Fasterxml Jackson-databind 2.9.5 (not an official CPE) Fasterxml Jackson-databind 2.9.4 (not an official CPE) Fasterxml Jackson-databind 2.9.3 (not an official CPE) Fasterxml Jackson-databind 2.9.2 (not an official CPE) Fasterxml Jackson-databind 2.9.1 (not an official CPE) Fasterxml Jackson-databind 2.9.0 Prerelease4 (not an official CPE) Fasterxml Jackson-databind 2.9.0 Prerelease3 (not an official CPE) Fasterxml Jackson-databind 2.9.0 Prerelease2 (not an official CPE) Fasterxml Jackson-databind 2.9.0 - (not an official CPE) Fasterxml Jackson-databind 2.9.0 Prerelease1 (not an official CPE) Fasterxml Jackson-databind 2.9.0 (not an official CPE) Fasterxml Jackson-databind 2.8.11.2 (not an official CPE) Fasterxml Jackson-databind 2.8.11.1 (not an official CPE) Fasterxml Jackson-databind 2.8.11 (not an official CPE) Fasterxml Jackson-databind 2.8.9 (not an official CPE) Fasterxml Jackson-databind 2.8.10 (not an official CPE) Fasterxml Jackson-databind 2.8.8.1 (not an official CPE) Fasterxml Jackson-databind 2.8.8 (not an official CPE) Fasterxml Jackson-databind 2.8.6 (not an official CPE) Fasterxml Jackson-databind 2.8.7 (not an official CPE) Fasterxml Jackson-databind 2.8.5 (not an official CPE) Fasterxml Jackson-databind 2.8.3 (not an official CPE) Fasterxml Jackson-databind 2.8.4 (not an official CPE) Fasterxml Jackson-databind 2.8.2 (not an official CPE) Fasterxml Jackson-databind 2.8.0 (not an official CPE) Fasterxml Jackson-databind 2.8.1 (not an official CPE) Fasterxml Jackson-databind 2.7.9.4 (not an official CPE) Fasterxml Jackson-databind 2.7.9.2 (not an official CPE) Fasterxml Jackson-databind 2.7.9.3 (not an official CPE) Fasterxml Jackson-databind 2.7.9.1 (not an official CPE) Fasterxml Jackson-databind 2.7.9 (not an official CPE) Fasterxml Jackson-databind 2.7.8 (not an official CPE) Fasterxml Jackson-databind 2.7.7 (not an official CPE) Fasterxml Jackson-databind 2.7.6 (not an official CPE) Fasterxml Jackson-databind 2.7.5 (not an official CPE) Fasterxml Jackson-databind 2.7.4 (not an official CPE) Fasterxml Jackson-databind 2.7.3 (not an official CPE) Fasterxml Jackson-databind 2.7.2 (not an official CPE) Fasterxml Jackson-databind 2.7.1-1 (not an official CPE) Redhat Jboss brms 6.4.10 (not an official CPE) Fasterxml Jackson-databind 2.7.1 (not an official CPE) Fasterxml Jackson-databind 2.7.0 Rc3 (not an official CPE) Fasterxml Jackson-databind 2.7.0 Rc2 (not an official CPE) Fasterxml Jackson-databind 2.7.0 Rc1 (not an official CPE) Fasterxml Jackson-databind 2.7.0 - (not an official CPE) Fasterxml Jackson-databind 2.7.0 (not an official CPE) Fasterxml Jackson-databind 2.6.7.1 (not an official CPE) Fasterxml Jackson-databind 2.6.7.2 (not an official CPE) Fasterxml Jackson-databind 2.6.7 (not an official CPE) Fasterxml Jackson-databind 2.6.5 (not an official CPE) Fasterxml Jackson-databind 2.6.6 (not an official CPE) Fasterxml Jackson-databind 2.6.4 (not an official CPE) Fasterxml Jackson-databind 2.6.2 (not an official CPE) Fasterxml Jackson-databind 2.6.1 (not an official CPE) Fasterxml Jackson-databind 2.6.0 Rc4 (not an official CPE) Fasterxml Jackson-databind 2.6.0 Rc3 (not an official CPE) Fasterxml Jackson-databind 2.6.0 Rc2 (not an official CPE) Fasterxml Jackson-databind 2.6.0 - (not an official CPE) Fasterxml Jackson-databind 2.6.0 Rc1 (not an official CPE) Fasterxml Jackson-databind 2.6.0 (not an official CPE) Fasterxml Jackson-databind 2.6.3 (not an official CPE) Redhat Openshift container platform 3.11 (not an official CPE)