# Oracle Communications Policy Management


- [CVE-2022-22965](https://insights.sbomify.com/CVE-2022-22965/): Spring Framework JDK 9+ Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-17530](https://insights.sbomify.com/CVE-2020-17530/): Apache Struts Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2018-11776](https://insights.sbomify.com/CVE-2018-11776/): Apache Struts Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2015-0235](https://insights.sbomify.com/CVE-2015-0235/): Memory corruption in n/a (critical 10.0)
- [CVE-2021-43527](https://insights.sbomify.com/CVE-2021-43527/): Memory corruption in NSS (critical 9.8)
- [CVE-2019-0230](https://insights.sbomify.com/CVE-2019-0230/): Improperly Controlled Modification of Dynamically-Determined Object Attributes in Apache Struts (critical 9.8)
- [CVE-2020-36179](https://insights.sbomify.com/CVE-2020-36179/): Unsafe Deserialization in jackson-databind (high 8.8)
- [CVE-2020-36180](https://insights.sbomify.com/CVE-2020-36180/): Unsafe Deserialization in jackson-databind (high 8.8)
- [CVE-2020-36181](https://insights.sbomify.com/CVE-2020-36181/): Unsafe Deserialization in jackson-databind (high 8.8)
- [CVE-2020-36182](https://insights.sbomify.com/CVE-2020-36182/): Unsafe Deserialization in jackson-databind (high 8.8)
- [CVE-2020-36184](https://insights.sbomify.com/CVE-2020-36184/): Unsafe Deserialization in jackson-databind (high 8.8)
- [CVE-2020-36183](https://insights.sbomify.com/CVE-2020-36183/): Unsafe Deserialization in jackson-databind (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/communications-policy-management/