https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T00:34:49.366533+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-06175 bdu:2021-06175 2026-10-05T00:34:49.448812+00:00 bdu:2021-06175 https://cve.radiocsirt.org/vuln/cnvd-2021-101202 cnvd-2021-101202 2026-10-05T00:34:49.448851+00:00 cnvd-2021-101202 https://cve.radiocsirt.org/vuln/euvd-2026-255965 EUVD-2026-255965 2026-10-05T00:34:49.448867+00:00 EUVD-2026-255965 https://cve.radiocsirt.org/vuln/fkie_cve-2021-35464 fkie_cve-2021-35464 2026-10-05T00:34:49.448878+00:00

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* request to the server. The vulnerability exists due to the usage of Sun ONE Application Framework (JATO) found in versions of Java 8 or earlier

 https://cve.radiocsirt.org/vuln/ghsa-6x75-vwp5-q242 GHSA-6x75-vwp5-q242 2026-10-05T00:34:49.448908+00:00

ForgeRock AM server 6.x before 7, and OpenAM 14.6.3, has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/Version request to the server. The vulnerability exists due to incorrect usage of Sun ONE Application Framework (JATO).

 https://cve.radiocsirt.org/vuln/gsd-2021-35464 gsd-2021-35464 2026-10-05T00:34:49.448925+00:00 gsd-2021-35464