Product by Oracle

    Oracle Insurance Policy Administration J2EE

    18 known vulnerabilities in Oracle Insurance Policy Administration J2EE (Oracle), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Insurance Policy Administration J2EE (Oracle)
    CriticalCVE-2018-8013

    Apache Batik: Deserialization of Untrusted Data

    also in 21 other products

    9.8
    CriticalCVE-2020-10683

    Dom4j Project Dom4j: XML External Entity (XXE)

    also in 36 other products

    9.8
    HighCVE-2020-5398

    Spring Framework: Cross-site Scripting

    also in 33 other products

    8.0
    CriticalCVE-2020-9546

    FasterXML Jackson-databind: security vulnerability

    also in 31 other products

    9.8
    HighCVE-2020-10673

    FasterXML Jackson-databind: security vulnerability

    also in 31 other products

    8.8
    HighCVE-2020-11113

    FasterXML Jackson-databind: security vulnerability

    also in 32 other products

    8.8
    HighCVE-2016-0635

    Oracle Insurance Policy Administration J2EE: security vulnerability

    also in 9 other products

    8.8
    HighCVE-2020-35491

    FasterXML Jackson-databind: security vulnerability

    also in 26 other products

    8.1
    HighCVE-2020-35490

    FasterXML Jackson-databind: security vulnerability

    also in 25 other products

    8.1
    HighCVE-2018-15756

    DoS Attack via Range Requests

    also in 39 other products

    7.5
    HighCVE-2020-10968

    FasterXML Jackson-databind: security vulnerability

    also in 31 other products

    8.8
    HighCVE-2020-11112

    FasterXML Jackson-databind: security vulnerability

    also in 31 other products

    8.8
    HighCVE-2020-10969

    FasterXML Jackson-databind: security vulnerability

    also in 31 other products

    8.8
    HighCVE-2020-10672

    FasterXML Jackson-databind: security vulnerability

    also in 31 other products

    8.8
    LowCVE-2020-9488

    Apache Log4j: security vulnerability

    also in 44 other products

    3.7
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    6.5
    MediumCVE-2020-5397

    CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux

    also in 27 other products

    5.3
    MediumCVE-2019-12415

    Apache POI: XML External Entity (XXE)

    also in 26 other products

    5.5

    All products by Oracle