Forgerock Openam vulnerabilities

• forgerock openam, access management (am), access management +2 more ForgeRock AM server 6.x before 7, and OpenAM 14.6.3, has a Java deserialization vulnerability in... CVE-2021-35464 In KEVPublic exploit EPSS 100.0% 9.8 CriticalJuly 22, 2021
• forgerock openam ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an... CVE-2021-29156 Public exploit EPSS 76.8% 7.5 HighMarch 25, 2021
• forgerock access management, openam +1 more Auth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access... CVE-2017-14395 6.1 MediumJune 19, 2019
• forgerock access management, openam +1 more OAuth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access... CVE-2017-14394 6.1 MediumJune 19, 2019
• forgerock openam XML External Entity (XXE) Vulnerability in /SSOPOST/metaAlias/%realm%/idpv2 in OpenAM - Access... CVE-2016-10097 7.5 HighJanuary 2, 2017
• forgerock openam The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 through 10.0.2, 10.1.0-Xpress, and 11.0.0... CVE-2014-7246 3.5 LowNovember 14, 2014