Forgerock Уязвимости

Временная шкала

Тип

Access Management Software10
Not Defined8
Programming Language Software1

Продукт

ForgeRock Access Management5
Forgerock Access Management3
ForgeRock Access Managemen2
ForgeRock OpenIDM1
ForgeRock Access Management Web Policy Agent1

Устранение последствий

Official Fix10
Temporary Fix0
Workaround0
Unavailable0
Not Defined9

Эксплуатационная пригодность

High1
Functional0
Proof-of-Concept0
Unproven0
Not Defined18

Вектор доступа

Not Defined0
Physical0
Local0
Adjacent3
Network16

Аутентификация

Not Defined0
High0
Low7
None12

Взаимодействие с пользователем

Not Defined0
Required5
None14

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤51
≤66
≤75
≤82
≤94
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤52
≤66
≤75
≤81
≤94
≤101

VulDB

≤10
≤20
≤30
≤41
≤54
≤62
≤75
≤86
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤75
≤82
≤91
≤103

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤82
≤91
≤105

Поставщик

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Эксплойт 0-дня

<1k1
<2k12
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Эксплойт сегодня

<1k15
<2k3
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Объем рынка эксплойтов

🔴 CTI Деятельность

Affected Products (11): AM (1), Access Managemen (2), Access Management (8), Access Management Java Policy Agent (1), Access Management Web Policy Agent (1), IDM (1), Identity Manager (1), Java Remote Connector Server (1), OpenAM (2), OpenICF (1), OpenIDM (2)

ОпубликованоBaseTempУязвимостиProdЭ�RemEPSSCTICVE
27.03.20247.27.0Forgerock Access Management обход каталогаAccess Management SoftwareNot DefinedOfficial Fix0.000440.04CVE-2023-0582
14.04.20239.89.8ForgeRock Access Management эскалация привилегийAccess Management SoftwareNot DefinedNot Defined0.001040.00CVE-2022-3748
30.03.20236.06.0ForgeRock OpenIDM LDAP Connector слабое шифрованиеНеизвестноNot DefinedNot Defined0.001320.03CVE-2023-1656
28.02.20238.78.7ForgeRock Access Management Web Policy Agent обход каталогаAccess Management SoftwareNot DefinedNot Defined0.001210.00CVE-2023-0339
28.02.20238.78.7ForgeRock Access Management Java Policy Agent обход каталогаAccess Management SoftwareNot DefinedNot Defined0.001210.00CVE-2023-0511
27.10.20226.66.6ForgeRock Access Managemen LDAP Query эскалация привилегийНеизвестноNot DefinedNot Defined0.000620.00CVE-2022-24670
27.10.20226.96.9ForgeRock Access Managemen Deployment эскалация привилегийНеизвестноNot DefinedNot Defined0.000630.00CVE-2022-24669
20.09.20228.58.4ForgeRock IDM/Java Remote Connector Server LDAP Connector эскалация привилегийProgramming Language SoftwareNot DefinedOfficial Fix0.002890.00CVE-2022-0143
15.02.20228.48.3ForgeRock Access Management эскалация привилегийAccess Management SoftwareNot DefinedOfficial Fix0.004890.05CVE-2021-4201
26.08.20215.55.3ForgeRock Access Management SAML2 эскалация привилегийAccess Management SoftwareNot DefinedOfficial Fix0.002210.02CVE-2021-37154

9 больше записей не показано

🔒 Login Required

You need to signup and login to see more of the remaining 9 results.

◂ ПредыдущийОбзорДалее ▸

Interested in the pricing of exploits?

See the underground prices here!