Known vulnerabilities in Oracle Insurance Insbridge Rating and Underwriting

Known vulnerabilities in Oracle Insurance Insbridge Rating and Underwriting

Vendor: Oracle

Software: Oracle Insurance Insbridge Rating and Underwriting

Software CPE: cpe:2.3:a:oracle:oracle_insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 8

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	5.6.0.0	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	5.6.0.0	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	-	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU27487 - Improper Certificate Validation CVE-2020-9488	CWE-295	Low	No	No	5.6.1.0	04.05.2020	SB2020050406 SB2020071606 SB2020071620 and 67 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Available	No	5.6.1.0	21.04.2020	SB2020042126 SB2020052033 SB2020052103 and 181 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-12415	CWE-611	High	No	No	-	06.11.2019	SB2019110635 SB2020012308 SB2020012309 and 42 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Available	No	-	28.03.2019	SB2019032804 SB2019041026 SB2019041801 and 155 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2015-9251	CWE-79	Low	No	No	-	31.07.2018	SB2018080106 SB2019011705 SB2019100301 and 63 more