Skip to content
Forgerock Access Management vulnerabilities
-
ping identity pingam, forgerock access management +1 more
Open Redirect in PingAM
CVE-2024-25566
5.1 Medium
-
forgerock access management
Path Traversal in ForgeRock Access Managment
CVE-2023-0582
8.1 High
-
forgerock access management
Improper authorization that can lead to account impersonation
CVE-2022-3748
9.8 Critical
-
forgerock access management
Anonymous users can register / de-register for configuration change notifications
CVE-2022-24669
6.5 Medium
-
forgerock access management
Any user can run unrestricted LDAP queries against a configuration endpoint
CVE-2022-24670
7.1 High
-
forgerock access management
Pre-authentication session hijacking
CVE-2021-4201
9.6 Critical
-
forgerock access management
ForgeRock Access Management (AM) before 7.0.2, when configured with Active Directory as the...
CVE-2021-37153
9.8 Critical
-
forgerock access management
In ForgeRock Access Management (AM) before 7.0.2, the SAML2 implementation allows XML injection,...
CVE-2021-37154
9.8 Critical
-
forgerock openam, access management (am), access management +2 more
ForgeRock AM server 6.x before 7, and OpenAM 14.6.3, has a Java deserialization vulnerability in...
CVE-2021-35464
In KEVPublic exploit
EPSS 100.0%
9.8 Critical
-
forgerock access management, openam +1 more
Auth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access...
CVE-2017-14395
6.1 Medium
-
forgerock access management, openam +1 more
OAuth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access...
CVE-2017-14394
6.1 Medium
-
forgerock access management
The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows...
CVE-2018-7272
6.5 Medium