$ cve CVE-2019-14540 JSON

CVE-2019-14540

9.8

CRITICAL · CVSS 3.1 · EPSS 10.8% (pctl 96)

Patch early

EPSS 10.8% — above the 10% action threshold.

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	10.76% — more likely to be exploited than 96% of all CVEs
Weakness	CWE-502
On CISA KEV	no
Public exploit	none known
Published	2019-09-15
Last modified	2026-06-17

Vendor	Product
debian	debian linux
fasterxml	jackson-databind
fedoraproject	fedora
netapp	oncommand api services
netapp	oncommand workflow automation
netapp	steelstore cloud integrated storage
oracle	banking platform
oracle	customer management and segmentation foundation
oracle	financial services analytical applications infrastructure
oracle	global lifecycle management opatch
oracle	goldengate application adapters
oracle	goldengate stream analytics
oracle	mysql
oracle	primavera gateway
oracle	primavera unifier
oracle	retail customer management and segmentation foundation
oracle	retail xstore point of service
oracle	weblogic server
redhat	enterprise linux
redhat	jboss enterprise application platform