Insecure Deserialization

Applications and APIs are vulnerable if they deserialize hostile or tampered objects supplied by an attacker. Oracle Life Sciences IAMS Inbound User Provisioning does not accept serialized data from external client applications.