CVE-2021-35587 — Oracle Fusion Middleware Unspecified Vulnerability
CVE-2021-35587: Oracle Fusion Middleware Unspecified Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Oracle |
| Product | Fusion Middleware |
| Date added | 2022-11-28 |
| Due date | 2022-12-19 |
| Ransomware campaign use | Unknown |
Description
Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager product.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://www.oracle.com/security-alerts/cpujan2022.html; https://nvd.nist.gov/vuln/detail/CVE-2021-35587
Weakness behind it
CISA records this vulnerability as an instance of CWE-502, CWE-790. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-35587
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
See all 1,745 pages under Vulnerabilities (CVE) →
Related pages
Browse by topic
Every page in the corpus, grouped. Search finds one page; this shows what else is here.