ForgeRock Inc.

Products

ProductCVEsExploitedLatest
Access Management1–Apr 14, 2023
OpenIDM and Java Remote Connector Server (RCS)1–Mar 29, 2023

Exploited and recent CVEs

  • CVE-2022-3748 Critical 9.8 Improper authorization that can lead to account impersonation 0.9%
  • CVE-2023-1656 High 7.5 When the LDAP connector is started with StartTLS configured, LDAP BIND credentials are transmitted insecurely, prior to establishing the TLS connection. 0.3%