CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-07-22
ForgeRock Access Manager (OpenAM) JATO Java Deserialization Remote Code Execution (RCE) Vulnerability (CVE-2021-35464) Security Advisory
[Affected Scope] ForgeRock Access Manager (AM) versions prior to 7.0 (including OpenAM 14.6.3 and earlier)
[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending a single crafted HTTP request
[Mitigation] Immediately upgrade to ForgeRock AM 7.0 or later, or restrict external access to JATO-related endpoints such as /ccversion/*