VDB
CVE-2021-35587
CVE-2021-35587
PUBLISHED
KEV
CVSS 9.800000190734863 CRITICAL
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
EPSS 96.28% · 99.9th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
96.28%
99.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corporation | Access Manager | 11.1.2.3.0, 12.2.1.3.0, 12.2.1.4.0 |
| oracle | access_manager | 11.1.2.3.0, 12.2.1.3.0, 12.2.1.4.0 |
Timeline
- CVE Published
- May 17, 2013 VulnCheck KEV Exploitation
- Jan 15, 2020 VulnCheck XDB Entry
- Jan 19, 2020 VulnCheck XDB Entry
- Feb 28, 2020 VulnCheck XDB Entry
- Mar 2, 2020 VulnCheck XDB Entry
- Jun 19, 2020 VulnCheck XDB Entry
- Jun 20, 2020 VulnCheck XDB Entry
- Jan 1, 2021 VulnCheck KEV Exploitation
- Feb 11, 2021 VulnCheck KEV Exploitation
- Mar 25, 2021 VulnCheck XDB Entry
- Jan 20, 2022 EPSS Score