Read the docs

ForgeRock

Records22All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

ForgeRock records in CISA KEV
TI-2021-14210 ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Access Management 12 records CRITICAL Openam 6 records CRITICAL Ldap Connector 2 records MEDIUM Identity Manager 1 record LOW Java Policy Agents 1 record MEDIUM Racf Connector 1 record MEDIUM Service Broker 1 record LOW Web Policy Agents 1 record MEDIUM

Records

1 record in Web Policy Agents · all components

TI-2023-00323 CVE-2023-0339 · GHSA-f9v2-3453-rj68

AM Web Policy Agent path traversal

Priority MEDIUM 51

Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00973 Published 2023-02-28 No fix listed CWE-23
Open these records in search →