[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-nucrN8tbagUmQnT3O2yTBfhN2WIpF8BJMRbJRSRrcM":3,"g5a-ex:oracle\u002Finsurance_policy_administration@*":141,"g5a-family:oracle\u002Finsurance_policy_administration":143},{"success":4,"data":5},true,{"product":6,"versions":47,"topVulnerabilitiesByEpss":60,"kevVulnerabilities":118,"seoMetadata":119,"meta":138},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":46},"oracle","insurance_policy_administration",12,31,0,"2021-07-21",[14,18,20,23,26,28,31,34,36,38,41,44],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"10.0",2,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"10.1",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"10.2",3,{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"10.2.4",1,{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"11.0",{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},"11.0.2",22,{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},"11.1.0",8,{"version":35,"cve_count":25,"kev_count":11,"has_kev":17},"11.2.0",{"version":37,"cve_count":16,"kev_count":11,"has_kev":17},"11.2.7",{"version":39,"cve_count":40,"kev_count":11,"has_kev":17},"11.2.8",6,{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},"11.3.0",9,{"version":45,"cve_count":33,"kev_count":11,"has_kev":17},"11.3.1","Insurance Policy Administration by Oracle is a technology product with 12 tracked versions and 31 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[48,49,50,51,52,53,54,55,56,57,58,59],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},{"version":35,"cve_count":25,"kev_count":11,"has_kev":17},{"version":37,"cve_count":16,"kev_count":11,"has_kev":17},{"version":39,"cve_count":40,"kev_count":11,"has_kev":17},{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},{"version":45,"cve_count":33,"kev_count":11,"has_kev":17},[61,69,76,82,88,93,98,102,106,113],{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":68},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",9.8,"v3.1","Critical",0.89792,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":75},"CVE-2020-25649","A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.","2020-12-03",7.5,"High",0.17714,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":81},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,0.17065,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":87},"CVE-2020-11987","Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.","2021-02-24",8.2,0.1328,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":73,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":92},"CVE-2021-36090","When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.","2021-07-13",0.12945,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":80,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":97},"CVE-2020-35728","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web\u002Fjavax.servlet.jsp.jstl).","2020-12-27",0.12504,{"cveId":99,"description":100,"publishedDate":91,"cvssScore":73,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":101},"CVE-2021-35516","When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package.",0.12365,{"cveId":103,"description":104,"publishedDate":91,"cvssScore":73,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":105},"CVE-2021-35515","When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.",0.11567,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":110,"cvssVersion":66,"severity":111,"isKev":17,"epssScore":112},"CVE-2020-5421","In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","2020-09-19",6.5,"Medium",0.11564,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":117},"CVE-2019-17195","Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.","2019-10-15",0.11121,[],{"title":120,"metaDescription":121,"keywords":122,"structuredData":123},"Insurance Policy Administration by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Insurance Policy Administration by Oracle covering 12 versions with 31 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Insurance Policy Administration vulnerabilities, Insurance Policy Administration security, Insurance Policy Administration CVE, Oracle Insurance Policy Administration, Insurance Policy Administration threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":124,"@type":125,"name":126,"description":121,"url":127,"manufacturer":128,"applicationCategory":132,"softwareVersion":133,"mainEntity":134},"https:\u002F\u002Fschema.org","SoftwareApplication","Insurance Policy Administration","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Finsurance_policy_administration",{"@type":129,"name":130,"url":131},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","12 versions tracked",{"@type":135,"name":136,"description":137,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Insurance Policy Administration Security Vulnerabilities","Security vulnerabilities affecting Insurance Policy Administration by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":139,"apiVersion":140},"2026-10-17T14:59:59.047Z","3.0",{"rows":142,"total":11,"capped":17,"failed":11},[],[144],{"product":145,"cves":146},"insurance_policy_administration_j2ee",18]