Search: CVE-2021-35464

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	KEVEPSS 99%	CVE-2021-35464ForgeRock Access Management (AM) · Deserialization of Untrusted Data Critical9.8KEVEPSS 99%2021-11-03CISA KEVCVE-2021-35464 CVE-2021-35464 is a remote code execution vulnerability in ForgeRock Access Management (AM) Core Server. An attacker can exploit this by sending a specially crafted HTTP request to one of three specific endpoints, allowing code execution with the privileges of the current user. The vendor advises against running ForgeRock AM as the root user to reduce risk. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. KEVEPSS 99%Vulnerability CWE-502 #exploited-in-the-wild	CISA KEV	2021-11-03

Page 1 of 1