Oracle Identity Management Suite vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Oracle Identity Management Suite: 1 record(s), with affected versions and fixes.cpe:2.3:a:oracle:identity_management_suite
CVE-2017-5645
Critical · 9.8
Public exploit CWE-502 Apr 17, 2017
Deserialization of Untrusted Data in Apache Software Foundation Log4j
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.