CVE-2021-35587 — Oracle Fusion Middleware Unspecified Vulnerability
CVE-2021-35587: Oracle Fusion Middleware Unspecified Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Oracle |
| Product | Fusion Middleware |
| Date added | 2022-11-28 |
| Due date | 2022-12-19 |
| Ransomware campaign use | Unknown |
Description
Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager product.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://www.oracle.com/security-alerts/cpujan2022.html; https://nvd.nist.gov/vuln/detail/CVE-2021-35587
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-35587
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog