EXPOSURES › CVE-2019-14379
CVE-2019-14379
CRITICAL
DETAIL
SourceNVD · cve
Published2019-07-29
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-14379 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
NetApp · vendorOracle · vendorapple · vendordebian · vendorfasterxml · vendorfedoraproject · vendorredhat · vendoractive iq unified manager · productbanking platform · productcommunications diameter signaling router · productcommunications instant messaging server · productdebian linux · productenterprise linux · productfedora · productfinancial services analytical applications infrastructure · productgoldengate stream analytics · productjackson-databind · productjboss enterprise application platform · productjd edwards enterpriseone orchestrator · productjd edwards enterpriseone tools · productoncommand workflow automation · productopenshift container platform · productprimavera gateway · productprimavera unifier · productretail customer management and segmentation foundation · productretail xstore point of service · productservice level manager · productsiebel engineering - installer \& deployment · productsiebel ui framework · productsingle sign-on · productsnapcenter · productxcode · product
DESCRIPTION
SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.
SENTIMENT · TRUSTED SOURCES
synthesis
neutral
+0.00
No coverage found for Apple's handling of CVE-2019-14379 in the provided sources.
No coverage found for Apple's handling of CVE-2019-14379 in the provided sources.
AFFECTED FEDRAMP PRODUCTS · 11
| PRODUCT | STATUS |
|---|---|
| Aconex for Defense Oracle |
Authorized |
| Cloud Insights NetApp |
In Process |
| Federal Managed Cloud Services Oracle |
Authorized |
| Fusion Cloud Oracle |
Authorized |
| Government Cloud - Common Controls Oracle |
Authorized |
| Oracle Cloud Infrastructure-Government Cloud Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) - Moderate Oracle |
In Process |
| Oracle Service Cloud Oracle |
Authorized |
| Oracle Service Cloud (DOD) Oracle |
Authorized |
| Taleo Cloud - U.S. Government Cloud Oracle |
Authorized |