Lucene search
PRIOn knowledge basePRION:CVE-2021-35587HistoryJan 19, 2022 - 12:15 p.m.
Design/Logic Flaw
2022-01-1912:15:00
PRIOn knowledge base
www.prio-n.com
16
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
| CPE | Name | Operator | Version |
|---|---|---|---|
| access_manager | eq | 11.1.2.3.0 | |
| access_manager | eq | 12.2.1.3.0 | |
| access_manager | eq | 12.2.1.4.0 |
Related
cisa_kev
cisa_kev
Oracle Fusion Middleware Unspecified Vulnerability
2022-11-28 00:00:00
nessus
nessus
Oracle Access Manager Unknown Vulnerability (Jan 2022 CPU)
2022-01-21 00:00:00
cvelist
cvelist
CVE-2021-35587
2022-01-19 11:21:42
nvd
nvd
CVE-2021-35587
2022-01-19 12:15:09
nuclei
nuclei
Oracle Access Manager - Remote Code Execution
2022-03-19 08:54:33
attackerkb
attackerkb
CVE-2021-35587
2022-01-19 00:00:00
cve
cve
CVE-2021-35587
2022-01-19 12:15:09
githubexploit
githubexploit
Exploit for CVE-2021-35587
2022-03-14 05:03:54
checkpoint_advisories
checkpoint_advisories
Oracle Access Manager Authentication Bypass (CVE-2021-35587)
2022-04-10 00:00:00
thn
thn
qualysblog
qualysblog
Qualys Threat Research Unit: Threat Thursdays, December 2022
2022-12-29 19:05:19
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00