Records22All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
ForgeRock records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 44
When the LDAP connector is started with StartTLS configured, unauthenticated access is granted.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00655 · Published 2022-09-19 · Fixed in 1.5.20.9 CWE-284
Priority LOW 35
Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00347 · Published 2023-03-29 · No fix listed CWE-319
Open these records in search →