Oracle Insurance Policy Administration J2ee Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Version

11.0.2	4
10.2.0	4
11.1.0	2
11.2.0	2
10.0	2

Remediation

Official Fix	14
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Exploitability

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	14

Access Vector

Not Defined	0
Physical	0
Local	2
Adjacent	0
Network	12

Authentication

Not Defined	0
High	0
Low	2
None	12

User Interaction

Not Defined	0
Required	2
None	12

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	2
≤7	0
≤8	4
≤9	4
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	2
≤7	0
≤8	8
≤9	0
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	2
≤7	0
≤8	6
≤9	2
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	2
≤7	0
≤8	4
≤9	2
≤10	4

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	4
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	0
<5k	2
<10k	4
<25k	6
<50k	0
<100k	2
≥100k	0

Exploit Today

<1k	10
<2k	0
<5k	2
<10k	2
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Versions (20): 9.6.1, 9.7.1, 10.0, 10.0.1, 10.1, 10.1.2, 10.2, 10.2.0.37, 10.2.2, 10.2.4, 10.2.4.12, 11.0, 11.0.2, 11.0.2.25, 11.1, 11.1.0.15, 11.2, 11.2.0.26, 11.2.2, 11.3

Link to Product Website: https://www.oracle.com

Published	Base	Temp	Vulnerability	0day	Today	Exp	Rem	CVE
07/20/2021	8.1	7.7	Oracle Insurance Policy Administration J2EE jackson-databind deserialization	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2020-35490
01/19/2021	9.8	9.6	Oracle Insurance Policy Administration J2EE Architecture xml external entity reference	$25k-$100k	$5k-$25k	Not Defined	Official Fix	CVE-2020-10683
10/20/2020	3.7	3.6	Oracle Insurance Policy Administration J2EE Architecture information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2020-9488
10/20/2020	7.5	7.2	Oracle Insurance Policy Administration J2EE Admin Console code download	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2020-5398
10/20/2020	9.8	9.4	Oracle Insurance Policy Administration J2EE Architecture deserialization	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2020-9546
07/15/2020	5.5	5.3	Oracle Insurance Policy Administration J2EE Architecture xml external entity reference	$0-$5k	$0-$5k	Not Defined	Official Fix	CVE-2019-12415
07/15/2020	7.5	7.2	Oracle Insurance Policy Administration J2EE Architecture code download	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2020-5398
07/15/2020	7.5	7.2	Oracle Insurance Policy Administration J2EE Architecture infinite loop	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2017-12626
07/16/2019	7.5	7.4	Oracle Insurance Policy Administration J2EE Spring Framework resource management	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2018-15756
07/16/2019	9.8	9.4	Oracle Insurance Policy Administration J2EE Apache Commons FileUpload access control	$25k-$100k	$5k-$25k	Not Defined	Official Fix	CVE-2016-1000031