CVE:CVE-2018-14719
CNNVD:CNNVD-201901-019
FasterXML jackson-databind是一个基于JAVA可以将XML和JSON等数据格式与JAVA对象进行转换的库。Jackson可以轻松的将Java对象转换成json对象和xml文档，同样也可以将json、xml转换成Java对象。
FasterXML Jackson-databind 2.9.7之前的2.x版本中存在代码问题漏洞。远程攻击者可利用该漏洞执行任意代码。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.6.7.2,2.7.9.5,2.8.11.3,2.9.7,and avoid the version [2.6.0,2.6.7.2),[2.7.0,2.7.9.5),[2.8.0,2.8.11.3),[2.9.0,2.9.7); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade oracle banking_platform to a higher version than 2.5.0,2.6.0,2.6.1,2.6.2,and avoid the version 2.5.0,2.6.0,2.6.1,2.6.2; Upgrade oracle business_process_management_suite to a higher version than 12.1.3.0.0,12.2.1.3.0,and avoid the version 12.1.3.0.0,12.2.1.3.0; Upgrade oracle clusterware to a higher version than 12.1.0.2.0,and avoid the version 12.1.0.2.0; Upgrade oracle communications_billing_and_revenue_management to a higher version than 7.5,12.0,and avoid the version 7.5,12.0; Upgrade oracle database_server to a higher version than 11.2.0.4,12.1.0.2,12.2.0.1,18c,19c,and avoid the version 11.2.0.4,12.1.0.2,12.2.0.1,18c,19c; Upgrade oracle enterprise_manager_for_virtualization to a higher version than 13.2.2,13.2.3,13.3.1,and avoid the version 13.2.2,13.2.3,13.3.1; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.0.2,8.0.3,8.0.4,8.0.5,8.0.6,8.0.7,and avoid the version 8.0.2,8.0.3,8.0.4,8.0.5,8.0.6,8.0.7; Upgrade oracle global_lifecycle_management_opatch to a higher version than 11.2.0.3.23,12.2.0.1.19,13.9.4.2.1,and avoid the version (,11.2.0.3.23),[12.2.0.1.0,12.2.0.1.19),[13.9.4.0.0,13.9.4.2.1); Upgrade oracle jdeveloper to a higher version than 12.1.3.0.0,12.2.1.3.0,and avoid the version 12.1.3.0.0,12.2.1.3.0; Upgrade oracle primavera_p6_enterprise_project_portfolio_management to a higher version than 17.12,15.1,15.2,16.1,16.2,18.8,and avoid the version [17.7,17.12],15.1,15.2,16.1,16.2,18.8; Upgrade oracle primavera_unifier to a higher version than 17.12,16.1,16.2,18.8,and avoid the version [17.7,17.12],16.1,16.2,18.8; Upgrade oracle retail_merchandising_system to a higher version than 15.0,16.0,and avoid the version 15.0,16.0; Upgrade oracle retail_workforce_management_software to a higher version than 1.60.9.0.0,and avoid the version 1.60.9.0.0; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0; Upgrade redhat openshift_container_platform to a higher version than 3.11.153,4.6.26,4.1.18,and avoid the version [3.11,3.11.153),[4.6,4.6.26),[4.1,4.1.18); Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than *