ForgeRock vulnerabilities
7 published CVEs name ForgeRock among the affected products.
- 7Published CVEs7 of them scored
- 0Last 12 monthspublished in the last year
- 4Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2023-0582
Path Traversal in ForgeRock Access Managment
forgerock · access management
High8.1 - CVE-2023-0511
AM Java Policy Agent path traversal
ForgeRock · Access Management Java Policy Agent
Critical9.1 - CVE-2023-0339
AM Web Policy Agent path traversal
ForgeRock · Access Management Web Policy Agent
Critical9.1 - CVE-2022-24669
Anonymous users can register / de-register for configuration change notifications
ForgeRock · Access Management
Medium6.5 - CVE-2022-24670
Any user can run unrestricted LDAP queries against a configuration endpoint
ForgeRock · Access Management
High7.1 - CVE-2022-0143
LDAP Connector: When startTLS is used then LDAP connector ignores the wrong password
ForgeRock · LDAP Connector
Critical9.3 - CVE-2021-4201
Pre-authentication session hijacking
ForgeRock · Access Management
Critical9.6