[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMbXvG47AvyGNXwnzLC133YOpHvXhuhnABwsymyx3tJA":3,"g5a-family:oracle\u002Faccess_manager":129,"g5a-ex:oracle\u002Faccess_manager@*":130},{"success":4,"data":5},true,{"product":6,"versions":29,"topVulnerabilitiesByEpss":34,"kevVulnerabilities":97,"seoMetadata":107,"meta":126},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":28},"oracle","access_manager",4,16,2,"2023-01-18",[14,18,21,25],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"10.1.4.3.0",0,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":4},"11.1.2.3.0",13,{"version":22,"cve_count":23,"kev_count":24,"has_kev":4},"12.2.1.3.0",10,1,{"version":26,"cve_count":27,"kev_count":24,"has_kev":4},"12.2.1.4.0",5,"Access Manager by Oracle is a technology product with 4 tracked versions and 16 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[30,31,32,33],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":4},{"version":22,"cve_count":23,"kev_count":24,"has_kev":4},{"version":26,"cve_count":27,"kev_count":24,"has_kev":4},[35,43,48,55,62,67,74,80,85,91],{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":4,"epssScore":42},"CVE-2020-2555","Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2020-01-15",9.8,"v3.1","Critical",0.97116,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":4,"epssScore":47},"CVE-2021-35587","Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2022-01-19",0.96284,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":41,"isKev":17,"epssScore":54},"CVE-2018-2879","Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. Note: Please refer to Doc ID \u003Ca href=\"http:\u002F\u002Fsupport.oracle.com\u002FCSP\u002Fmain\u002Farticle?cmd=show&type=NOT&id=2386496.1\">My Oracle Support Note 2386496.1 for instructions on how to address this issue. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2018-04-19",9,"v3.0",0.21362,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":40,"severity":60,"isKev":17,"epssScore":61},"CVE-2021-29425","In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"\u002F\u002F..\u002Ffoo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.","2021-04-13",4.8,"Medium",0.10549,{"cveId":63,"description":64,"publishedDate":51,"cvssScore":65,"cvssVersion":53,"severity":41,"isKev":17,"epssScore":66},"CVE-2018-2739","Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are 10.1.4.3.0, 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Access Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.0 Base Score 9.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N).",9.3,0.02242,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":40,"severity":72,"isKev":17,"epssScore":73},"CVE-2022-39412","Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin Console). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).","2022-10-18",7.5,"High",0.02213,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":40,"severity":60,"isKev":17,"epssScore":79},"CVE-2019-10219","A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.","2019-11-08",6.1,0.02157,{"cveId":81,"description":82,"publishedDate":51,"cvssScore":83,"cvssVersion":40,"severity":60,"isKev":17,"epssScore":84},"CVE-2018-2587","Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are 10.1.4.3.0, 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Access Manager accessible data as well as unauthorized read access to a subset of Oracle Access Manager accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N).",6.5,0.01993,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":53,"severity":60,"isKev":17,"epssScore":90},"CVE-2017-10154","Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Access Manager accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N).","2017-10-19",5.3,0.01944,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":40,"severity":60,"isKev":17,"epssScore":96},"CVE-2021-2358","Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Rest interfaces for Access Mgr). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).","2021-07-21",4.9,0.01586,[98,103],{"cveId":44,"description":45,"publishedDate":46,"cvssScore":39,"severity":41,"isKev":4,"epssScore":47,"cisaVulnName":99,"cisaDateAdded":100,"cisaShortDescription":101,"cisaRequiredAction":102},"Oracle Fusion Middleware Unspecified Vulnerability","2022-11-28","Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager product.","Apply updates per vendor instructions.",{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"severity":41,"isKev":4,"epssScore":42,"cisaVulnName":104,"cisaDateAdded":105,"cisaShortDescription":106,"cisaRequiredAction":102},"Oracle Multiple Products Remote Code Execution Vulnerability","2021-11-03","Multiple Oracle products contain a remote code execution vulnerability that allows an unauthenticated attacker with network access via T3 or HTTP to takeover the affected system. Impacted Oracle products: Oracle Coherence in Fusion Middleware, Oracle Utilities Framework, Oracle Retail Assortment Planning, Oracle Commerce, Oracle Communications Diameter Signaling Router (DSR).",{"title":108,"metaDescription":109,"keywords":110,"structuredData":111},"Access Manager by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Access Manager by Oracle covering 4 versions with 16 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Access Manager vulnerabilities, Access Manager security, Access Manager CVE, Oracle Access Manager, Access Manager threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Access Manager KEV, Access Manager exploited vulnerabilities",{"@context":112,"@type":113,"name":114,"description":109,"url":115,"manufacturer":116,"applicationCategory":120,"softwareVersion":121,"mainEntity":122},"https:\u002F\u002Fschema.org","SoftwareApplication","Access Manager","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Faccess_manager",{"@type":117,"name":118,"url":119},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","4 versions tracked",{"@type":123,"name":124,"description":125,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Access Manager Security Vulnerabilities","Security vulnerabilities affecting Access Manager by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":127,"apiVersion":128},"2026-10-18T22:15:17.751Z","3.0",[],{"rows":131,"total":11,"capped":17,"failed":16},[132,136],{"cveId":44,"name":99,"severity":41,"cvss":39,"added":100,"epss":47,"published":133,"ranges":134,"checked":4,"hits":135,"covers":17},"2022-01-19T12:15:09.727",[19,22,26],[],{"cveId":36,"name":104,"severity":41,"cvss":39,"added":105,"epss":42,"published":137,"ranges":138,"checked":4,"hits":139,"covers":17},"2020-01-15T17:15:17.347",[19],[]]