[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxgAkMFRlnoezPJAW1up846CPWQ6LkS4B_af7JQBOi9Q":3,"g5a-risk:CVE-2021-35587":125},{"success":4,"data":5,"meta":123},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":27,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":59,"references":60,"referencesCount":59,"weaknesses":73,"weaknessesCount":81,"isActivelyExploited":4,"cisaInfo":82,"otxData":27,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":121,"notableEvents":122},"CVE-2021-35587","What is CVE-2021-35587?","Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager.","Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11.1.2.3....","2022-01-19T12:15:09.727","2025-10-27T17:08:36.917",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"secalert_us@oracle.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[],[32],{"Source":33,"Type":34,"CVSSData":35,"BaseSeverity":25,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":43,"ObtainAllPrivilege":43,"ObtainUserPrivilege":43,"ObtainOtherPrivilege":43,"UserInteractionRequired":43},"nvd@nist.gov","Primary",{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":38,"IntegrityImpact":38,"AvailabilityImpact":38,"BaseScore":39,"BaseSeverity":40,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,"",10,6.4,false,0.96284,[44,44,44,44,44,44,44],"Critical",[48,53,56],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"oracle","access_manager","11.1.2.3.0","cpe:2.3:a:oracle:access_manager:11.1.2.3.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"12.2.1.3.0","cpe:2.3:a:oracle:access_manager:12.2.1.3.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":57,"criteria":58,"vulnerable":4},"12.2.1.4.0","cpe:2.3:a:oracle:access_manager:12.2.1.4.0:*:*:*:*:*:*:*",3,[61,66,68],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2022.html","Oracle",[65],"Vendor Advisory",{"url":62,"source":63,"tags":67},[65],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2021-35587","CISA",[72],"US Government Resource",[74],{"id":75,"name":76,"description":77,"extendedDescription":40,"status":78,"abstraction":79,"structure":80},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","Draft","Base","Simple",1,{"shortDescription":40,"requiredAction":40,"vulnerabilityName":40,"dateAdded":27},[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2021-35587? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-35587, a critical severity cyber security vulnerability from 2022. High exploit probability (96.3%). Vulnerability in the ...","CVE-2021-35587, CVE-2021-35587 vulnerability, CVE-2021-35587 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, oracle security, access_manager vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2021-35587",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-35587","Cybersecurity","CVE-2021-35587, CVE-2021-35587 vulnerability, CVE-2021-35587 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":27,"Negate":27,"Nodes":111},[112],{"Operator":113,"Negate":43,"CPEMatch":114},"OR",[115,117,119],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8DEAFEDC-2D0F-4A5F-99A0-BD41DD6DC017",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":118,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A287FA5D-D7D9-40B4-8DB2-1D7CE1808408",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":120,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"20EB3430-0FF2-4668-BB20-A5611ACC73F6",[],[],{"lastModified":11,"cacheTime":124,"version":36},1792371338409,{"score":126,"band":46,"action":127,"scoredAt":128},90,"Emergency patch","2026-10-16T06:53:09.452476+00:00"]