$ cve CVE-2019-16335 JSON

CVE-2019-16335

9.8

CRITICAL · CVSS 3.1 · EPSS 5% (pctl 92)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.

Scoring

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	4.96% — more likely to be exploited than 92% of all CVEs
Weakness	CWE-502
On CISA KEV	no
Public exploit	none known
Published	2019-09-15
Last modified	2026-06-17

Affected (18)

Vendor	Product
debian	debian linux
fasterxml	jackson-databind
fedoraproject	fedora
netapp	oncommand api services
netapp	oncommand workflow automation
netapp	steelstore cloud integrated storage
oracle	banking platform
oracle	customer management and segmentation foundation
oracle	financial services analytical applications infrastructure
oracle	global lifecycle management opatch
oracle	goldengate application adapters
oracle	goldengate stream analytics
oracle	primavera gateway
oracle	retail customer management and segmentation foundation
oracle	retail xstore point of service
oracle	weblogic server
redhat	enterprise linux
redhat	jboss enterprise application platform

References

→ the Explorer · watch your stack · NVD