Description
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Oracle | Access Manager | 11.1.2.3.0, 12.2.1.3.0, 12.2.1.4.0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Oracle Access Manager unauthenticated Remote Code Execution
exploit/multi/http/oracle_access_manager_rce_cve_2021_35587
GitHub 2 repositories
-
ZZ-SOCMAP/CVE-2021-35587 ★ 42 · Mar 14, 2022
Oracle Access Manager Unauthenticated Attacker Vulnerability CVE-2021-35587
-
Jwa7470/2025-Oracle-SSO-LDAP-Attack-Post-Incident-Written-Report ★ 0 · Aug 28, 2026
Post-incident report analyzing the Oracle Cloud SSO/LDAP supply chain attack (CVE-2021-35587). Details the exploitation of legacy server infrastructure, impact across 140,000+ cloud tenants, root-cau…
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Oracle Access Manager - Remote Code Execution http/cves/2021/CVE-2021-35587.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.