https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 18:21:47 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-06175 bdu:2021-06175 https://cve.radiocsirt.org/vuln/bdu:2021-06175 https://cve.radiocsirt.org/vuln/cnvd-2021-101202 cnvd-2021-101202 https://cve.radiocsirt.org/vuln/cnvd-2021-101202 https://cve.radiocsirt.org/vuln/euvd-2026-255965 EUVD-2026-255965 https://cve.radiocsirt.org/vuln/euvd-2026-255965 https://cve.radiocsirt.org/vuln/fkie_cve-2021-35464 <p>ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* request to the server. The vulnerability exists due to the usage of Sun ONE Application Framework (JATO) found in versions of Java 8 or earlier</p> <p>ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* request to the server. The vulnerability exists due to the usage of Sun ONE Application Framework (JATO) found in versions of Java 8 or earlier</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-35464 https://cve.radiocsirt.org/vuln/ghsa-6x75-vwp5-q242 <p>ForgeRock AM server 6.x before 7, and OpenAM 14.6.3, has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/Version request to the server. The vulnerability exists due to incorrect usage of Sun ONE Application Framework (JATO).</p> <p>ForgeRock AM server 6.x before 7, and OpenAM 14.6.3, has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/Version request to the server. The vulnerability exists due to incorrect usage of Sun ONE Application Framework (JATO).</p> https://cve.radiocsirt.org/vuln/ghsa-6x75-vwp5-q242 https://cve.radiocsirt.org/vuln/gsd-2021-35464 gsd-2021-35464 https://cve.radiocsirt.org/vuln/gsd-2021-35464