Approved changes feed: RSS · Atom

cpe:2.3:a:forgerock:access_management:6.5.4:*:*:*:*:*:*:*

part: a version: 6.5.4 update: *

VendorForgerock (62f6869f-1355-5abb-ba20-0a0692140c41)
ProductAccess Management (714c1040-7f28-55b8-9936-e06559c01799)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-24670 vulnerable 2026-06-03 14:46:30.795599 Any user can run unrestricted LDAP queries against a configuration endpoint
HIGH (7.1)
An attacker can use the unrestricted LDAP queries to determine configuration entries
Published: 2022-10-27T16:53:00.019Z
Updated: 2025-05-09T19:17:19.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24669 vulnerable 2026-06-03 14:46:30.794462 Anonymous users can register / de-register for configuration change notifications
MEDIUM (6.5)
It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services.
Published: 2022-10-27T16:53:56.378Z
Updated: 2025-05-06T18:33:31.107Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.