Access Management
Approved changes feed: RSS · Atom
cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Forgerock (62f6869f-1355-5abb-ba20-0a0692140c41) |
|---|---|
| Product | Access Management (714c1040-7f28-55b8-9936-e06559c01799) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-25566 |
vulnerable | 2026-06-08 06:31:23.222821 |
Open Redirect in PingAM
An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allow an attacker to redirect end-users to malicious sites under their control, simplifying phishing attacks
Published: 2024-10-29T15:34:53.358Z
Updated: 2024-10-29T19:58:25.775Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0582 |
vulnerable | 2026-06-08 05:52:31.966255 |
Path Traversal in ForgeRock Access Managment
HIGH (8.1)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ForgeRock Access Management allows Authorization Bypass.
This issue affects access management: before 7.3.0, before 7.2.1, before 7.1.4, through 7.0.2.
Published: 2024-03-27T17:09:43.769Z
Updated: 2025-04-14T17:03:58.780Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3748 |
vulnerable | 2026-06-08 05:48:22.262271 |
Improper authorization that can lead to account impersonation
CRITICAL (9.8)
Improper Authorization vulnerability in ForgeRock Inc. Access Management allows Authentication Bypass. This issue affects Access Management: from 6.5.0 through 7.2.0.
Published: 2023-04-14T14:06:30.571Z
Updated: 2025-04-14T17:03:55.384Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24670 |
vulnerable | 2026-06-08 05:41:01.168976 |
Any user can run unrestricted LDAP queries against a configuration endpoint
HIGH (7.1)
An attacker can use the unrestricted LDAP queries to determine configuration entries
Published: 2022-10-27T16:53:00.019Z
Updated: 2025-05-09T19:17:19.956Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24669 |
vulnerable | 2026-06-08 05:41:01.165473 |
Anonymous users can register / de-register for configuration change notifications
MEDIUM (6.5)
It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services.
Published: 2022-10-27T16:53:56.378Z
Updated: 2025-05-06T18:33:31.107Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4201 |
vulnerable | 2026-06-08 05:38:08.692159 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37154 |
vulnerable | 2026-06-08 05:32:53.439973 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37153 |
vulnerable | 2026-06-08 05:32:53.439661 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35464 |
vulnerable | 2026-06-08 05:32:48.730526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7272 |
vulnerable | 2026-06-08 05:12:03.544238 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14395 |
vulnerable | 2026-06-08 05:08:49.901830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14394 |
vulnerable | 2026-06-08 05:08:49.888548 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.