What’s Vulnerable › Products

ForgeRock Access Management vulnerabilities

12 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your ForgeRock Access Management version is affected

Exploited ForgeRock Access Management vulnerabilities

• CVE-2021-35464 — ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability

Latest ForgeRock Access Management vulnerabilities

• CVE-2024-25566 — Open Redirect in PingAM (CVSS 6.1)
• CVE-2023-0582 — Path Traversal in ForgeRock Access Managment (CVSS 9.8)
• CVE-2022-3748 — Improper authorization that can lead to account impersonation (CVSS 9.8)
• CVE-2022-24670 — Any user can run unrestricted LDAP queries against a configuration endpoint (CVSS 6.5)
• CVE-2022-24669 — Anonymous users can register / de-register for configuration change notifications (CVSS 6.5)
• CVE-2021-4201 — Pre-authentication session hijacking (CVSS 9.8)
• CVE-2021-37154 — (CVSS 9.8)
• CVE-2021-37153 — (CVSS 9.8)
• CVE-2021-35464 — ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability (CVSS 9.8) — exploited
• CVE-2017-14395 — (CVSS 6.1)
• CVE-2017-14394 — (CVSS 6.1)
• CVE-2018-7272 — (CVSS 6.5)