forgerock
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 32 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 14, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping
OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint
OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows
OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession
OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions
OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page
OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface
OpenAM before 16.1.3 Reflected XSS via OAuth2 Authorization Error Page
OpenAM allows use of arbitrary OIDC requested claims values in id_token and user_info
OpenDJ Denial of Service (Dos) using alias loop
Monitor forgerock in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.