forgerock
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 24 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 14, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →OpenAM allows use of arbitrary OIDC requested claims values in id_token and user_info
OpenDJ Denial of Service (Dos) using alias loop
Open Redirect in PingAM
Path Traversal in ForgeRock Access Managment
Improper authorization that can lead to account impersonation
When the LDAP connector is started with StartTLS configured, LDAP BIND credentials are transmitted insecurely, prior to establishing the TLS connection.
AM Java Policy Agent path traversal
AM Web Policy Agent path traversal
Anonymous users can register / de-register for configuration change notifications
Any user can run unrestricted LDAP queries against a configuration endpoint
Monitor forgerock in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.