[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fisSGPqMFT0_30ResuldJMyUWLSO5xjUbD6xPxgJQ7yQ":3,"g5a-ex:oracle\u002Fpolicy_automation@*":171,"g5a-family:oracle\u002Fpolicy_automation":173},{"success":4,"data":5},true,{"product":6,"versions":65,"topVulnerabilitiesByEpss":89,"kevVulnerabilities":148,"seoMetadata":149,"meta":168},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":64},"oracle","policy_automation",23,11,0,"2021-12-28",[14,17,19,21,24,27,29,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"10.3.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"10.3.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"10.4.6",{"version":22,"cve_count":23,"kev_count":11,"has_kev":16},"10.4.7",3,{"version":25,"cve_count":26,"kev_count":11,"has_kev":16},"12.1.0",2,{"version":28,"cve_count":26,"kev_count":11,"has_kev":16},"12.1.1",{"version":30,"cve_count":31,"kev_count":11,"has_kev":16},"12.2.0",1,{"version":33,"cve_count":31,"kev_count":11,"has_kev":16},"12.2.1",{"version":35,"cve_count":31,"kev_count":11,"has_kev":16},"12.2.10",{"version":37,"cve_count":11,"kev_count":11,"has_kev":16},"12.2.11",{"version":39,"cve_count":11,"kev_count":11,"has_kev":16},"12.2.12",{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},"12.2.13",{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},"12.2.14",{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},"12.2.15",{"version":47,"cve_count":31,"kev_count":11,"has_kev":16},"12.2.2",{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},"12.2.20",{"version":51,"cve_count":31,"kev_count":11,"has_kev":16},"12.2.3",{"version":53,"cve_count":31,"kev_count":11,"has_kev":16},"12.2.4",{"version":55,"cve_count":31,"kev_count":11,"has_kev":16},"12.2.5",{"version":57,"cve_count":31,"kev_count":11,"has_kev":16},"12.2.6",{"version":59,"cve_count":31,"kev_count":11,"has_kev":16},"12.2.7",{"version":61,"cve_count":31,"kev_count":11,"has_kev":16},"12.2.8",{"version":63,"cve_count":31,"kev_count":11,"has_kev":16},"12.2.9","Policy Automation by Oracle is a technology product with 23 tracked versions and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":23,"kev_count":11,"has_kev":16},{"version":25,"cve_count":26,"kev_count":11,"has_kev":16},{"version":28,"cve_count":26,"kev_count":11,"has_kev":16},{"version":30,"cve_count":31,"kev_count":11,"has_kev":16},{"version":33,"cve_count":31,"kev_count":11,"has_kev":16},{"version":35,"cve_count":31,"kev_count":11,"has_kev":16},{"version":37,"cve_count":11,"kev_count":11,"has_kev":16},{"version":39,"cve_count":11,"kev_count":11,"has_kev":16},{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},{"version":47,"cve_count":31,"kev_count":11,"has_kev":16},{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},{"version":51,"cve_count":31,"kev_count":11,"has_kev":16},{"version":53,"cve_count":31,"kev_count":11,"has_kev":16},{"version":55,"cve_count":31,"kev_count":11,"has_kev":16},{"version":57,"cve_count":31,"kev_count":11,"has_kev":16},{"version":59,"cve_count":31,"kev_count":11,"has_kev":16},{"version":61,"cve_count":31,"kev_count":11,"has_kev":16},{"version":63,"cve_count":31,"kev_count":11,"has_kev":16},[90,98,103,110,115,121,125,130,134,141],{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"cvssVersion":95,"severity":96,"isKev":16,"epssScore":97},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,"v3.1","Medium",0.99215,{"cveId":99,"description":100,"publishedDate":12,"cvssScore":101,"cvssVersion":95,"severity":96,"isKev":16,"epssScore":102},"CVE-2021-44832","Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.",6.6,0.97906,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":107,"cvssVersion":95,"severity":108,"isKev":16,"epssScore":109},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",9.8,"Critical",0.89792,{"cveId":111,"description":112,"publishedDate":113,"cvssScore":94,"cvssVersion":95,"severity":96,"isKev":16,"epssScore":114},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",0.8682,{"cveId":116,"description":117,"publishedDate":118,"cvssScore":119,"cvssVersion":95,"severity":96,"isKev":16,"epssScore":120},"CVE-2021-41184","jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A workaround is to not accept the value of the `of` option from untrusted sources.","2021-10-26",6.5,0.40768,{"cveId":122,"description":123,"publishedDate":118,"cvssScore":94,"cvssVersion":95,"severity":96,"isKev":16,"epssScore":124},"CVE-2021-41182","jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.",0.39361,{"cveId":126,"description":127,"publishedDate":128,"cvssScore":107,"cvssVersion":95,"severity":108,"isKev":16,"epssScore":129},"CVE-2019-17195","Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.","2019-10-15",0.11121,{"cveId":131,"description":132,"publishedDate":118,"cvssScore":94,"cvssVersion":95,"severity":96,"isKev":16,"epssScore":133},"CVE-2021-41183","jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.",0.08533,{"cveId":135,"description":136,"publishedDate":137,"cvssScore":138,"cvssVersion":95,"severity":139,"isKev":16,"epssScore":140},"CVE-2020-9488","Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1","2020-04-27",3.7,"Low",0.08216,{"cveId":142,"description":143,"publishedDate":144,"cvssScore":145,"cvssVersion":95,"severity":146,"isKev":16,"epssScore":147},"CVE-2021-2351","Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: \"Changes in Native Network Encryption with the July 2021 Critical Patch Update\" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2021-07-21",8.3,"High",0.02432,[],{"title":150,"metaDescription":151,"keywords":152,"structuredData":153},"Policy Automation by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Policy Automation by Oracle covering 23 versions with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Policy Automation vulnerabilities, Policy Automation security, Policy Automation CVE, Oracle Policy Automation, Policy Automation threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":154,"@type":155,"name":156,"description":151,"url":157,"manufacturer":158,"applicationCategory":162,"softwareVersion":163,"mainEntity":164},"https:\u002F\u002Fschema.org","SoftwareApplication","Policy Automation","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fpolicy_automation",{"@type":159,"name":160,"url":161},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","23 versions tracked",{"@type":165,"name":166,"description":167,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Policy Automation Security Vulnerabilities","Security vulnerabilities affecting Policy Automation by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":169,"apiVersion":170},"2026-10-17T19:24:50.018Z","3.0",{"rows":172,"total":11,"capped":16,"failed":11},[],[174,177],{"product":175,"cves":176},"policy_automation_connector_for_siebel",6,{"product":178,"cves":179},"policy_automation_for_mobile_devices",5]