IP
Product
Insurance Policy Administration
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 21Medium 6Low 0
Watch
Add Insurance Policy Administration to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-5421 | 6.5 | Sep 19 | RFD Protection Bypass via jsessionid Affected: 11.1.0 through 11.3.0; 10.2; 10.2.4; 11.0.2 |
| CVE-2021-35043 | 6.1 | Jul 19 | OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected) Affected: 11.0.2; 11.1.0; 11.2.8; 11.3.0; 11.3.1 |
| CVE-2021-36374 | 5.5 | Jul 14 | When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even… Affected: 11.0 through 11.3.1 |
| CVE-2021-36373 | 5.5 | Jul 14 | When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small… Affected: 11.0 through 11.3.1 |
| CVE-2020-17521 | 5.5 | Dec 7 | Apache Groovy provides extension methods to aid with creating temporary directories Affected: 11.0 through 11.3.1 |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: 11.0.2; 11.1.0; 11.2.8; 11.3.0; 11.3.1 |
Showing 6