{"uuid": "249c8ae8-9a7c-428c-bd8c-e80789dfbbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35587", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/oracle_access_manager_rce_cve_2021_35587.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Jang\", \"Peterjson\", \"Y4er\", \"sfewer-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated deserialization of untrusted data vulnerability in the OpenSSO\\n          Agent component of the Oracle Access Manager (OAM) product. The affected product versions are 11.1.2.3.0,\\n          12.2.1.3.0, and 12.2.1.4.0.\", \"disclosure_date\": \"2022-01-19\", \"fullname\": \"exploit/multi/http/oracle_access_manager_rce_cve_2021_35587\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"Oracle Access Manager unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/oracle_access_manager_rce_cve_2021_35587.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/oracle_access_manager_rce_cve_2021_35587\", \"references\": [\"CVE-2021-35587\", \"URL-https://testbnull.medium.com/oracle-access-manager-pre-auth-rce-cve-2021-35587-analysis-1302a4542316\", \"URL-https://twitter.com/testanull/status/1502114473989279744\", \"URL-https://github.com/Y4er/CVE-2020-2883/blob/master/CVE_2020_2883.java\", \"URL-https://www.oracle.com/security-alerts/cpujan2022.html\"], \"rport\": 14100, \"session_types\": false, \"targets\": [\"Linux Command\", \"Windows Command\", \"Unix Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:06.223017Z"}