Browse all 7 CVE security advisories affecting ForgeRock. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2023-0582 | Path Traversal in ForgeRock Access Managment — access managementCWE-22 | 8.1 | High | 2024-03-27 |
| CVE-2023-0511 | AM Java Policy Agent path traversal — Access Management Java Policy AgentCWE-23 | 9.1 | Critical | 2023-02-28 |
| CVE-2023-0339 | AM Web Policy Agent path traversal — Access Management Web Policy AgentCWE-23 | 9.1 | Critical | 2023-02-28 |
| CVE-2022-24669 | Anonymous users can register / de-register for configuration change notifications — Access ManagementCWE-862 | 6.5 | Medium | 2022-10-27 |
| CVE-2022-24670 | Any user can run unrestricted LDAP queries against a configuration endpoint — Access ManagementCWE-200 | 7.1 | High | 2022-10-27 |
| CVE-2022-0143 | LDAP Connector: When startTLS is used then LDAP connector ignores the wrong password — LDAP ConnectorCWE-284 | 9.3 | Critical | 2022-09-19 |
| CVE-2021-4201 | Pre-authentication session hijacking — Access ManagementCWE-284 | 9.6 | Critical | 2022-02-14 |
This page lists every published CVE security advisory associated with ForgeRock. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.