Oracle Access Manager 'opensso' Deserialization RCE (CVE-2021-35587)
Severity:
High
Summary
Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent) is vulnerable to a Java Object Deserialization remote code execution vulnerability. An attacker could exploit this vulnerability using specially-crafted serialized data to execute arbitrary code on the system or to perform a denial of service attack.
Impact
A remote attacker can gain Remote Code Execution
Remediation
Upgrade to the latest version of Oracle Access Manager
Required Skills for Successful Exploitation
Actions To Take
Classifications
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Related Vulnerabilities
Build your resistance to threats. And save hundreds of hours each month.
