[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-nucrN8tbagUmQnT3O2yTBfhN2WIpF8BJMRbJRSRrcM":3,"g5a-ex:oracle\u002Finsurance_policy_administration@*":139,"g5a-family:oracle\u002Finsurance_policy_administration":141},{"success":4,"data":5},true,{"product":6,"versions":47,"topVulnerabilitiesByEpss":60,"kevVulnerabilities":116,"seoMetadata":117,"meta":136},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":46},"oracle","insurance_policy_administration",12,31,0,"2021-07-21",[14,18,20,23,26,28,31,34,36,38,41,44],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"10.0",2,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"10.1",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"10.2",3,{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"10.2.4",1,{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"11.0",{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},"11.0.2",22,{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},"11.1.0",8,{"version":35,"cve_count":25,"kev_count":11,"has_kev":17},"11.2.0",{"version":37,"cve_count":16,"kev_count":11,"has_kev":17},"11.2.7",{"version":39,"cve_count":40,"kev_count":11,"has_kev":17},"11.2.8",6,{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},"11.3.0",9,{"version":45,"cve_count":33,"kev_count":11,"has_kev":17},"11.3.1","Insurance Policy Administration by Oracle is a technology product with 12 tracked versions and 31 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[48,49,50,51,52,53,54,55,56,57,58,59],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},{"version":35,"cve_count":25,"kev_count":11,"has_kev":17},{"version":37,"cve_count":16,"kev_count":11,"has_kev":17},{"version":39,"cve_count":40,"kev_count":11,"has_kev":17},{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},{"version":45,"cve_count":33,"kev_count":11,"has_kev":17},[61,69,76,82,88,93,97,102,106,111],{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":68},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",9.8,"v3.1","Critical",0.8904,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":75},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,"High",0.20929,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":81},"CVE-2020-25649","A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.","2020-12-03",7.5,0.17611,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":87},"CVE-2020-11987","Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.","2021-02-24",8.2,0.13635,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":80,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":92},"CVE-2021-36090","When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.","2021-07-13",0.13292,{"cveId":94,"description":95,"publishedDate":91,"cvssScore":80,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":96},"CVE-2021-35516","When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package.",0.12697,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":73,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":101},"CVE-2020-35728","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web\u002Fjavax.servlet.jsp.jstl).","2020-12-27",0.12504,{"cveId":103,"description":104,"publishedDate":91,"cvssScore":80,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":105},"CVE-2021-35515","When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.",0.11879,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":110},"CVE-2019-17195","Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.","2019-10-15",0.11032,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":73,"cvssVersion":66,"severity":74,"isKev":17,"epssScore":115},"CVE-2020-36188","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.","2021-01-06",0.10911,[],{"title":118,"metaDescription":119,"keywords":120,"structuredData":121},"Insurance Policy Administration by Oracle - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Insurance Policy Administration by Oracle covering 12 versions with 31 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Insurance Policy Administration vulnerabilities, Insurance Policy Administration security, Insurance Policy Administration CVE, Oracle Insurance Policy Administration, Insurance Policy Administration threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":122,"@type":123,"name":124,"description":119,"url":125,"manufacturer":126,"applicationCategory":130,"softwareVersion":131,"mainEntity":132},"https:\u002F\u002Fschema.org","SoftwareApplication","Insurance Policy Administration","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Finsurance_policy_administration",{"@type":127,"name":128,"url":129},"Organization","Oracle","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Foracle","Security Software","12 versions tracked",{"@type":133,"name":134,"description":135,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Insurance Policy Administration Security Vulnerabilities","Security vulnerabilities affecting Insurance Policy Administration by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":137,"apiVersion":138},"2026-10-28T18:25:18.013Z","3.0",{"rows":140,"total":11,"capped":17,"failed":11},[],[142],{"product":143,"cves":144},"insurance_policy_administration_j2ee",18]