Skip to contentForgerock Access Management vulnerabilities
- forgerock access managementPath Traversal in ForgeRock Access ManagmentCVE-2023-05828.1 High
- forgerock access managementImproper authorization that can lead to account impersonationCVE-2022-37489.8 Critical
- forgerock access management java policy agent, java policy agents +1 moreAM Java Policy Agent path traversalCVE-2023-05119.1 Critical
- forgerock access management web policy agent, web policy agents +1 moreAM Web Policy Agent path traversalCVE-2023-03399.1 Critical
- forgerock access managementAnonymous users can register / de-register for configuration change notificationsCVE-2022-246696.5 Medium
- forgerock access managementAny user can run unrestricted LDAP queries against a configuration endpointCVE-2022-246707.1 High
- forgerock access managementPre-authentication session hijackingCVE-2021-42019.6 Critical
- forgerock openam, access management (am), access management +2 moreForgeRock AM server 6.x before 7, and OpenAM 14.6.3, has a Java deserialization vulnerability in...CVE-2021-35464In KEVPublic exploitEPSS 100.0%9.8 Critical