CVE-2018-19362 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.