rood8008/CVE-2021-35464

PoC

rood8008/CVE-2021-35464

view exploit source poc_in_githubauthor rood8008published 2021-08-21catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2021-35464UScritical9.8OT criticalKEV
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and r…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan