Log in Start free

ForgeRock

Products

ProductCVEsExploitedLatest
Access Management4–Mar 27, 2024
Access Management Java Policy Agent1–Feb 28, 2023
Access Management Web Policy Agent1–Feb 28, 2023
LDAP Connector1–Sep 19, 2022

Exploited and recent CVEs

  • CVE-2023-0582 High 8.1 Path Traversal in ForgeRock Access Managment 0.8%
  • CVE-2023-0511 Critical 9.1 AM Java Policy Agent path traversal 1.0%
  • CVE-2023-0339 Critical 9.1 AM Web Policy Agent path traversal 1.0%
  • CVE-2022-24669 Medium 6.5 Anonymous users can register / de-register for configuration change notifications 0.4%
  • CVE-2022-24670 High 7.1 Any user can run unrestricted LDAP queries against a configuration endpoint 0.7%
  • CVE-2022-0143 Critical 9.3 LDAP Connector: When startTLS is used then LDAP connector ignores the wrong password 0.7%
  • CVE-2021-4201 Critical 9.6 Pre-authentication session hijacking 2.0%