CVE-2021-35587
OR
Oracle Fusion Middleware
Oracle Fusion Middleware Unspecified Vulnerability
What it is
Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager product.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Oracle entries on the list
- HTTP Server and Oracle Weblogic Server Proxy Plug-in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CVE-2026-21962 · Aug 24, 2026
- E-Business Suite Oracle E-Business Suite Improper Privilege Management Vulnerability CVE-2026-46817 · Jul 15, 2026
- PeopleSoft Enterprise PeopleTools Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CVE-2026-35273 · Jun 12, 2026
- WebLogic Server Oracle WebLogic Server Unspecified Vulnerability CVE-2024-21182 · Jun 1, 2026
- Fusion Middleware Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability CVE-2025-61757 · Nov 21, 2025
- E-Business Suite Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability CVE-2025-61884 · Oct 20, 2025