CPE Details
Oracle Insurance Policy Administration J2EE 11.2.2.0
11.2.2.0
2021-03-18
13h31 +00:00
13h31 +00:00
2021-04-21
12h47 +00:00
12h47 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:oracle:insurance_policy_administration_j2ee:11.2.2.0:*:*:*:*:*:*:*
Informations
Vendor
oracleProduct
insurance_policy_administration_j2eeVersion
11.2.2.0Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j. | 9.8 |
Critical |
||
| In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input. | 7.5 |
High |
||
| A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack. | 6.1 |
Medium |
2025©
tesweb SA
