CVE-2018-19362

N/A

Published: January 2, 2019 at 06:00 PM UTC

Updated: October 15, 2026 at 06:17 PM UTC

12 products affected across 4 vendorsDebian LinuxOpenShift Container PlatformWebcenter Portal

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 11%

SSVC

No known exploit

Description

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

8.0

Jackson Databind · Fasterxmlmaven

95%

2.6.0 ≤ v ≤ 2.6.7.22.7.0 ≤ v < 2.7.9.52.8.0 ≤ v < 2.8.11.32.9.0 ≤ v < 2.9.8

Affected range stops below 2.7.9.5, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.8.11.3, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.9.8, so it looks safe — our inference, not a vendor statement

Business Process Management Suite · Oracle

95%

12.1.3.0.0 12.2.1.3.0

Primavera P6 Enterprise Project Portfolio Management · Oracle

95%

17.7 ≤ v ≤ 17.1215.1 15.2 16.1 16.2 18.8

Primavera Unifier · Oracledrupal

95%

17.7 ≤ v ≤ 17.1216.1 16.2 18.8

Retail Workforce Management Software · Oracle

95%

1.60.9.0.0

Webcenter Portal · Oracledrupal

95%

12.2.1.3.0

Automation Manager · Red Hat

95%

7.3.1

Decision Manager · Red Hatrpm

95%

7.3.1

JBoss Bpm Suite · Red Hatrpm

95%

6.4.11

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references