ForgeRock Access Management (AM) 6.5.3
Approved changes feed: RSS · Atom
cpe:2.3:a:forgerock:access_management:6.5.3:*:*:*:*:*:*:*
part: a version: 6.5.3 update: *
| Vendor | Forgerock (62f6869f-1355-5abb-ba20-0a0692140c41) |
|---|---|
| Product | Access Management (714c1040-7f28-55b8-9936-e06559c01799) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-24670 |
vulnerable | 2026-06-03 14:46:30.795578 |
Any user can run unrestricted LDAP queries against a configuration endpoint
HIGH (7.1)
An attacker can use the unrestricted LDAP queries to determine configuration entries
Published: 2022-10-27T16:53:00.019Z
Updated: 2025-05-09T19:17:19.956Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24669 |
vulnerable | 2026-06-03 14:46:30.793766 |
Anonymous users can register / de-register for configuration change notifications
MEDIUM (6.5)
It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services.
Published: 2022-10-27T16:53:56.378Z
Updated: 2025-05-06T18:33:31.107Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4201 |
vulnerable | 2026-06-03 14:45:47.992503 |
Pre-authentication session hijacking
CRITICAL (9.6)
Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access Management 7.1 versions prior to 7.1.1; 6.5 versions prior to 6.5.4; all previous versions.
Published: 2022-02-14T21:04:29.132Z
Updated: 2025-04-14T17:03:52.274Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.