Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
forgerock access management vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-0582
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ForgeRock Access Management allows Authorization Bypass. This issue affects access management: prior to 7.3.0, prior to 7.2.1, prior to 7.1.4, up to and including 7.0.2.
9.8
CVSSv3
CVE-2022-3748
Improper Authorization vulnerability in ForgeRock Inc. Access Management allows Authentication Bypass. This issue affects Access Management: from 6.5.0 up to and including 7.2.0.
Forgerock Access Management
9.8
CVSSv3
CVE-2023-0339
Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1
Forgerock Web Policy Agents
9.8
CVSSv3
CVE-2023-0511
Relative Path Traversal vulnerability in ForgeRock Access Management Java Policy Agent allows Authentication Bypass. This issue affects Access Management Java Policy Agent: all versions up to 5.10.1
Forgerock Java Policy Agents
6.5
CVSSv3
CVE-2022-24669
It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services.
Forgerock Access Management 6.5.1
Forgerock Access Management 6.5.3
Forgerock Access Management 7.1.0
Forgerock Access Management 6.5.4
Forgerock Access Management
6.5
CVSSv3
CVE-2022-24670
An attacker can use the unrestricted LDAP queries to determine configuration entries
Forgerock Access Management 6.5.1
Forgerock Access Management 6.5.3
Forgerock Access Management 7.1.0
Forgerock Access Management 6.5.4
Forgerock Access Management
Forgerock Access Management 7.1.1
9.8
CVSSv3
CVE-2022-0143
When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector before 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS)
Forgerock Ldap Connector
9.8
CVSSv3
CVE-2021-4201
Missing access control in ForgeRock Access Management 7.1.0 and previous versions versions on all platforms allows remote unauthenticated malicious users to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access Management 7.1 versions b...
Forgerock Access Management 5.5.2
Forgerock Access Management 6.0.0
Forgerock Access Management 6.0.0.1
Forgerock Access Management 6.0.0.2
Forgerock Access Management 6.0.0.3
Forgerock Access Management 6.0.0.4
Forgerock Access Management 6.0.0.6
Forgerock Access Management 6.0.0.7
Forgerock Access Management 6.5.0
Forgerock Access Management 6.5.0.1
Forgerock Access Management 6.5.0.2
Forgerock Access Management 6.5.1
Forgerock Access Management 6.5.2.1
Forgerock Access Management 6.5.2.2
Forgerock Access Management 6.5.2.3
Forgerock Access Management 6.5.3
Forgerock Access Management 7.0.0
Forgerock Access Management 7.0.1
Forgerock Access Management 7.0.2
Forgerock Access Management 7.1.0
9.8
CVSSv3
CVE-2021-37153
ForgeRock Access Management (AM) prior to 7.0.2, when configured with Active Directory as the Identity Store, has an authentication-bypass issue.
Forgerock Access Management
9.8
CVSSv3
CVE-2021-37154
In ForgeRock Access Management (AM) prior to 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion.
Forgerock Access Management
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
inject
CVE-2024-34001
CVE-2024-37018
LFI
CVE-2024-1275
CVE-2024-1086
CSRF
CVE-2024-31030
CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »