ForgeRock vulnerabilities

CVEs per yearBy the year they were published

1. 20224
2. 20232
3. 20241

Newest CVEs

• CVE-2023-0582

  Path Traversal in ForgeRock Access Managment

  forgerock · access management

  High8.1
• CVE-2023-0511

  AM Java Policy Agent path traversal

  ForgeRock · Access Management Java Policy Agent

  Critical9.1
• CVE-2023-0339

  AM Web Policy Agent path traversal

  ForgeRock · Access Management Web Policy Agent

  Critical9.1
• CVE-2022-24669

  Anonymous users can register / de-register for configuration change notifications

  ForgeRock · Access Management

  Medium6.5
• CVE-2022-24670

  Any user can run unrestricted LDAP queries against a configuration endpoint

  ForgeRock · Access Management

  High7.1
• CVE-2022-0143

  LDAP Connector: When startTLS is used then LDAP connector ignores the wrong password

  ForgeRock · LDAP Connector

  Critical9.3
• CVE-2021-4201

  Pre-authentication session hijacking

  ForgeRock · Access Management

  Critical9.6