CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
ForgeRock Access Manager (OpenAM) JATO Java Deserialization Remote Code Execution (RCE) Vulnerability (CVE-2021-35464) Security Advisory
[Affected Scope] ForgeRock Access Manager (AM) versions prior to 7.0 (including OpenAM 14.6.3 and earlier)
[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending a single crafted HTTP request
[Mitigation] Immediately upgrade to ForgeRock AM 7.0 or later, or restrict external access to JATO-related endpoints such as /ccversion/*
Micro Focus Access Manager Information Leakage Vulnerability (CVE-2021-22506) Security Advisory & Mitigation Guide
[Affected Scope] All versions of Micro Focus Access Manager prior to version 5.0
[Impact] Unauthenticated remote attackers can exploit the Advance Configuration vulnerability to leak sensitive system configuration and credentials
[Mitigation] Immediately upgrade to Micro Focus Access Manager version 5.0 or higher, and restrict external access to the administration interface