Sploitus

2 exploited vulnerabilities in Oracle Access Manager

Vulnerabilities with publicly known exploits

Vendors
Oracle
With known exploits
2
Affected Oracle Access Manager versions
= 11.1.2.3.0, 12.2.1.3.0, 12.2.1.4.0

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2021-35587 5 exploits
CVSS 10.0 CRITICAL 2022-01-19
📄 Oracle Access Manager 12.2.1.4.0 Insecure DeserializationOracle Access Manager unauthenticated Remote Code Execution
CVE-2018-2879 1 exploit
CVSS 9.0 CRITICAL 2018-04-19FIX AVAILABLE
Oracle Access Manager 11.1.2.3.0 / 12.2.1.3.0 Authentication Bypass Vulnerability