https://vulnogram.org/ Most recent CVEs assigned by forgerock (forgerock). https://vulnogram.org/seaview/icons/forgerock.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2023-0582 https://vulnogram.org/CVE-2023-0582 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ForgeRock Access Management allows Authorization Bypass. This issue affects access management: before 7.3.0, before 7.2.1, before 7.1.4, through 7.0.2. High Wed, 27 Mar 2024 17:09:43 GMT https://vulnogram.org/CVE-2022-3748 https://vulnogram.org/CVE-2022-3748 Improper Authorization vulnerability in ForgeRock Inc. Access Management allows Authentication Bypass. This issue affects Access Management: from 6.5.0 through 7.2.0. Critical Network Exploitable Fri, 14 Apr 2023 14:06:30 GMT https://vulnogram.org/CVE-2023-1656 https://vulnogram.org/CVE-2023-1656 Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java… High Network Exploitable Wed, 29 Mar 2023 19:55:13 GMT https://vulnogram.org/CVE-2023-0511 https://vulnogram.org/CVE-2023-0511 Relative Path Traversal vulnerability in ForgeRock Access Management Java Policy Agent allows Authentication Bypass. This issue affects Access Management Java Policy Agent: all versions up to 5.10.1 Critical Network Exploitable Tue, 28 Feb 2023 16:26:19 GMT https://vulnogram.org/CVE-2023-0339 https://vulnogram.org/CVE-2023-0339 Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1 Critical Network Exploitable Tue, 28 Feb 2023 16:21:03 GMT https://vulnogram.org/CVE-2022-24669 https://vulnogram.org/CVE-2022-24669 It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services. Medium Network Exploitable Thu, 27 Oct 2022 16:53:56 GMT https://vulnogram.org/CVE-2022-24670 https://vulnogram.org/CVE-2022-24670 An attacker can use the unrestricted LDAP queries to determine configuration entries High Thu, 27 Oct 2022 16:53:00 GMT https://vulnogram.org/CVE-2022-0143 https://vulnogram.org/CVE-2022-0143 When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connecto… Critical Network Exploitable Mon, 19 Sep 2022 21:15:51 GMT https://vulnogram.org/CVE-2021-4201 https://vulnogram.org/CVE-2021-4201 Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access Management… Critical Network Exploitable Mon, 14 Feb 2022 21:04:29 GMT