[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fimHQfEhwsqSX8gQAVTqY4lXMnUtSlZfbLwZQgqC97yE":3,"g5a-ex:oracle\u002Finsurance_rules_palette@*":180,"g5a-family:oracle\u002Finsurance_rules_palette":182},{"success":4,"data":5},true,{"product":6,"versions":72,"topVulnerabilitiesByEpss":97,"kevVulnerabilities":157,"seoMetadata":158,"meta":177},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":71},"oracle","insurance_rules_palette",24,34,0,"2021-07-21",[14,18,21,24,26,28,30,32,34,37,39,41,44,46,48,50,52,55,57,60,62,65,67,69],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"10.0",10,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"10.0.1",1,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"10.1",8,{"version":25,"cve_count":20,"kev_count":11,"has_kev":17},"10.1.2",{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"10.2",{"version":29,"cve_count":23,"kev_count":11,"has_kev":17},"10.2.0",{"version":31,"cve_count":20,"kev_count":11,"has_kev":17},"10.2.0.37",{"version":33,"cve_count":20,"kev_count":11,"has_kev":17},"10.2.2",{"version":35,"cve_count":36,"kev_count":11,"has_kev":17},"10.2.4",7,{"version":38,"cve_count":20,"kev_count":11,"has_kev":17},"10.2.4.12",{"version":40,"cve_count":23,"kev_count":11,"has_kev":17},"11.0",{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},"11.0.2",23,{"version":45,"cve_count":20,"kev_count":11,"has_kev":17},"11.0.2.25",{"version":47,"cve_count":36,"kev_count":11,"has_kev":17},"11.1",{"version":49,"cve_count":36,"kev_count":11,"has_kev":17},"11.1.0",{"version":51,"cve_count":20,"kev_count":11,"has_kev":17},"11.1.0.15",{"version":53,"cve_count":54,"kev_count":11,"has_kev":17},"11.2.0",4,{"version":56,"cve_count":20,"kev_count":11,"has_kev":17},"11.2.0.26",{"version":58,"cve_count":59,"kev_count":11,"has_kev":17},"11.2.7",2,{"version":61,"cve_count":20,"kev_count":11,"has_kev":17},"11.2.8",{"version":63,"cve_count":64,"kev_count":11,"has_kev":17},"11.3.0",3,{"version":66,"cve_count":54,"kev_count":11,"has_kev":17},"11.3.1",{"version":68,"cve_count":20,"kev_count":11,"has_kev":17},"9.6.1",{"version":70,"cve_count":20,"kev_count":11,"has_kev":17},"9.7.1","Insurance Rules Palette by Oracle is a technology product with 24 tracked versions and 34 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":20,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":23,"kev_count":11,"has_kev":17},{"version":31,"cve_count":20,"kev_count":11,"has_kev":17},{"version":33,"cve_count":20,"kev_count":11,"has_kev":17},{"version":35,"cve_count":36,"kev_count":11,"has_kev":17},{"version":38,"cve_count":20,"kev_count":11,"has_kev":17},{"version":40,"cve_count":23,"kev_count":11,"has_kev":17},{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},{"version":45,"cve_count":20,"kev_count":11,"has_kev":17},{"version":47,"cve_count":36,"kev_count":11,"has_kev":17},{"version":49,"cve_count":36,"kev_count":11,"has_kev":17},{"version":51,"cve_count":20,"kev_count":11,"has_kev":17},{"version":53,"cve_count":54,"kev_count":11,"has_kev":17},{"version":56,"cve_count":20,"kev_count":11,"has_kev":17},{"version":58,"cve_count":59,"kev_count":11,"has_kev":17},{"version":61,"cve_count":20,"kev_count":11,"has_kev":17},{"version":63,"cve_count":64,"kev_count":11,"has_kev":17},{"version":66,"cve_count":54,"kev_count":11,"has_kev":17},{"version":68,"cve_count":20,"kev_count":11,"has_kev":17},{"version":70,"cve_count":20,"kev_count":11,"has_kev":17},[98,106,113,118,123,129,134,140,145,151],{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":103,"severity":104,"isKev":17,"epssScore":105},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",9.8,"v3.1","Critical",0.89792,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":110,"cvssVersion":103,"severity":111,"isKev":17,"epssScore":112},"CVE-2020-5398","In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a \"Content-Disposition\" header in the response where the filename attribute is derived from user supplied input.","2020-01-17",7.5,"High",0.88768,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":102,"cvssVersion":103,"severity":104,"isKev":17,"epssScore":117},"CVE-2018-1270","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.","2018-04-06",0.77476,{"cveId":119,"description":120,"publishedDate":121,"cvssScore":102,"cvssVersion":103,"severity":104,"isKev":17,"epssScore":122},"CVE-2018-1275","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.","2018-04-11",0.57414,{"cveId":124,"description":125,"publishedDate":116,"cvssScore":126,"cvssVersion":103,"severity":127,"isKev":17,"epssScore":128},"CVE-2018-1271","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.",5.9,"Medium",0.34444,{"cveId":130,"description":131,"publishedDate":132,"cvssScore":110,"cvssVersion":103,"severity":111,"isKev":17,"epssScore":133},"CVE-2020-25649","A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.","2020-12-03",0.17714,{"cveId":135,"description":136,"publishedDate":137,"cvssScore":138,"cvssVersion":103,"severity":111,"isKev":17,"epssScore":139},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,0.17065,{"cveId":141,"description":142,"publishedDate":143,"cvssScore":138,"cvssVersion":103,"severity":111,"isKev":17,"epssScore":144},"CVE-2020-35728","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web\u002Fjavax.servlet.jsp.jstl).","2020-12-27",0.12504,{"cveId":146,"description":147,"publishedDate":148,"cvssScore":149,"cvssVersion":103,"severity":127,"isKev":17,"epssScore":150},"CVE-2020-5421","In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","2020-09-19",6.5,0.11564,{"cveId":152,"description":153,"publishedDate":154,"cvssScore":155,"cvssVersion":103,"severity":127,"isKev":17,"epssScore":156},"CVE-2021-29425","In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"\u002F\u002F..\u002Ffoo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.","2021-04-13",4.8,0.10549,[],{"title":159,"metaDescription":160,"keywords":161,"structuredData":162},"Insurance Rules Palette by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Insurance Rules Palette by Oracle covering 24 versions with 34 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Insurance Rules Palette vulnerabilities, Insurance Rules Palette security, Insurance Rules Palette CVE, Oracle Insurance Rules Palette, Insurance Rules Palette threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":163,"@type":164,"name":165,"description":160,"url":166,"manufacturer":167,"applicationCategory":171,"softwareVersion":172,"mainEntity":173},"https:\u002F\u002Fschema.org","SoftwareApplication","Insurance Rules Palette","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Finsurance_rules_palette",{"@type":168,"name":169,"url":170},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","24 versions tracked",{"@type":174,"name":175,"description":176,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Insurance Rules Palette Security Vulnerabilities","Security vulnerabilities affecting Insurance Rules Palette by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":178,"apiVersion":179},"2026-10-17T12:56:22.429Z","3.0",{"rows":181,"total":11,"capped":17,"failed":11},[],[]]