Product by ForgeRock

    ForgeRock OpenAM

    6 known vulnerabilities in ForgeRock OpenAM (ForgeRock), 1 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    1

    Actively exploited (KEV)

    1

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ForgeRock OpenAM (ForgeRock)
    CriticalCVE-2021-35464

    ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability

    In CISA KEVRansomwarealso in 1 other product

    		9.8
    HighCVE-2021-29156

    ForgeRock OpenAM: LDAP Injection

    		7.5
    HighCVE-2016-10097

    ForgeRock OpenAM: XML External Entity (XXE)

    		7.5
    MediumCVE-2017-14394

    ForgeRock Access Management: security vulnerability

    also in 1 other product

    		6.1
    MediumCVE-2017-14395

    ForgeRock Access Management: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    Not ratedCVE-2014-7246

    ForgeRock OpenAM: Infinite Loop

    		—

    All products by ForgeRock