Product by Oracle
Policy Automation
11 known vulnerabilities in Policy Automation (Oracle), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2017-5645 | Apache Log4j: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2019-17195 | Oracle PeopleSoft Enterprise PeopleTools: Authentication Bypass | 9.8 | |
| Medium | CVE-2020-11022 | jQuery has a potential XSS vulnerability | 6.9 | |
| Medium | CVE-2021-44832 | Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration | 6.6 | |
| Medium | CVE-2021-41184 | XSS in the `of` option of the `.position()` util | 6.5 | |
| Medium | CVE-2021-41182 | XSS in the `altField` option of the Datepicker widget | 6.5 | |
| Medium | CVE-2019-11358 | Drupal core: security vulnerability | 6.1 | |
| Medium | CVE-2021-41183 | XSS in `*Text` options of the Datepicker widget | 6.5 | |
| High | CVE-2021-2351 | Oracle WebLogic Server: security vulnerability | 8.3 | |
| Low | CVE-2020-9488 | Apache Log4j: security vulnerability | 3.7 | |
| Medium | CVE-2019-10219 | Hibernate Hibernate-validator: Cross-site Scripting | 6.5 |