EXPOSURES › CVE-2018-14718

CVE-2018-14718

CRITICAL

DETAIL

SourceNVD · cve Published2019-01-02 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2018-14718 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

NetApp · vendor Oracle · vendor debian · vendor fasterxml · vendor redhat · vendor banking platform · product business process management suite · product communications billing and revenue management · product communications instant messaging server · product debian linux · product enterprise linux · product enterprise manager for virtualization · product financial services analytical applications infrastructure · product global lifecycle management opatch · product jackson-databind · product jd edwards enterpriseone orchestrator · product jd edwards enterpriseone tools · product jdeveloper · product nosql database · product oncommand workflow automation · product openshift container platform · product primavera p6 enterprise project portfolio management · product primavera unifier · product retail customer management and segmentation foundation · product retail merchandising system · product retail workforce management software · product siebel engineering - installer \& deployment · product siebel ui framework · product snapcenter · product steelstore cloud integrated storage · product webcenter portal · product

DESCRIPTION

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.

SENTIMENT · TRUSTED SOURCES

synthesis neutral +0.00

No coverage found to assess sentiment.

cooey ↗ neutral +0.00

No coverage found to assess sentiment.

AFFECTED FEDRAMP PRODUCTS · 11

PRODUCT	PROVIDER	STATUS	MATCH
Aconex for Defense Oracle	Oracle	Authorized	vendor-exact · 0.90
Cloud Insights NetApp	NetApp	In Process	vendor-exact · 0.90
Federal Managed Cloud Services Oracle	Oracle	Authorized	vendor-exact · 0.90
Fusion Cloud Oracle	Oracle	Authorized	vendor-exact · 0.90
Government Cloud - Common Controls Oracle	Oracle	Authorized	vendor-exact · 0.90
Oracle Cloud Infrastructure-Government Cloud Oracle	Oracle	Authorized	vendor-exact · 0.90
Oracle Enterprise Performance Management (EPM) Oracle	Oracle	Authorized	vendor-exact · 0.90
Oracle Enterprise Performance Management (EPM) - Moderate Oracle	Oracle	In Process	vendor-exact · 0.90
Oracle Service Cloud Oracle	Oracle	Authorized	vendor-exact · 0.90
Oracle Service Cloud (DOD) Oracle	Oracle	Authorized	vendor-exact · 0.90
Taleo Cloud - U.S. Government Cloud Oracle	Oracle	Authorized	vendor-exact · 0.90