Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:insurance_rules_palette:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductInsurance Rules Palette (8219511d-197d-5ff5-90d4-9c8ead3d1785)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5421 vulnerable 2026-06-08 05:26:42.855835 RFD Protection Bypass via jsessionid
HIGH (8.7)
In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.
Published: 2020-09-19T03:45:13.127Z
Updated: 2024-09-17T03:58:43.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36189 vulnerable 2026-06-08 05:25:02.698738 Details available
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.
Published: 2021-01-06T22:29:28.000Z
Updated: 2024-08-04T17:23:09.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36188 vulnerable 2026-06-08 05:25:02.635490 Details available
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.
Published: 2021-01-06T22:29:36.000Z
Updated: 2024-08-04T17:23:09.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36187 vulnerable 2026-06-08 05:25:02.630911 Details available
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.
Published: 2021-01-06T22:29:44.000Z
Updated: 2024-08-04T17:23:09.266Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36186 vulnerable 2026-06-08 05:25:02.626066 Details available
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.
Published: 2021-01-06T22:29:51.000Z
Updated: 2024-08-04T17:23:09.443Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36185 vulnerable 2026-06-08 05:25:02.621854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36184 vulnerable 2026-06-08 05:25:02.614924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36183 vulnerable 2026-06-08 05:25:02.607803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36182 vulnerable 2026-06-08 05:25:02.603372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36181 vulnerable 2026-06-08 05:25:02.597245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36180 vulnerable 2026-06-08 05:25:02.584624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36179 vulnerable 2026-06-08 05:25:02.564939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35728 vulnerable 2026-06-08 05:25:01.613751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25649 vulnerable 2026-06-08 05:22:37.066935 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10683 vulnerable 2026-06-08 05:16:35.581247 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10219 vulnerable 2026-06-08 05:12:22.710879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.