Product by ForgeRock

    ForgeRock Access Management

    12 known vulnerabilities in ForgeRock Access Management (ForgeRock), 1 of them actively exploited (CISA KEV).

    Key figures

    12

    Vulnerabilities

    1

    Actively exploited (KEV)

    1

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ForgeRock Access Management (ForgeRock)
    CriticalCVE-2021-35464

    ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability

    In CISA KEVRansomwarealso in 1 other product

    		9.8
    CriticalCVE-2021-4201

    Pre-authentication session hijacking

    		9.6
    CriticalCVE-2021-37154

    ForgeRock Access Management: security vulnerability

    		9.8
    CriticalCVE-2021-37153

    ForgeRock Access Management: security vulnerability

    		9.8
    CriticalCVE-2022-3748

    Improper authorization that can lead to account impersonation

    		9.8
    CriticalCVE-2023-0582

    Path Traversal in ForgeRock Access Managment

    		8.1
    MediumCVE-2018-7272

    ForgeRock Access Management: Information Disclosure

    		6.5
    HighCVE-2022-24670

    Any user can run unrestricted LDAP queries against a configuration endpoint

    		7.1
    MediumCVE-2017-14394

    ForgeRock Access Management: security vulnerability

    also in 1 other product

    		6.1
    MediumCVE-2017-14395

    ForgeRock Access Management: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    MediumCVE-2022-24669

    Anonymous users can register / de-register for configuration change notifications

    		6.5
    MediumCVE-2024-25566

    Open Redirect in PingAM

    also in 1 other product

    		6.1

    All products by ForgeRock