Forgerock 漏洞

时间轴

类型

Access Management Software10
Not Defined8
Programming Language Software1

产品

ForgeRock Access Management5
Forgerock Access Management3
ForgeRock Access Managemen2
ForgeRock OpenIDM1
ForgeRock Access Management Web Policy Agent1

修正

Official Fix10
Temporary Fix0
Workaround0
Unavailable0
Not Defined9

易受攻击性

High1
Functional0
Proof-of-Concept0
Unproven0
Not Defined18

访问向量

Not Defined0
Physical0
Local0
Adjacent3
Network16

身份验证

Not Defined0
High0
Low7
None12

用户交互

Not Defined0
Required5
None14

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤51
≤66
≤75
≤82
≤94
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤52
≤66
≤75
≤81
≤94
≤101

VulDB

≤10
≤20
≤30
≤41
≤54
≤62
≤75
≤86
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤75
≤82
≤91
≤103

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤82
≤91
≤105

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k1
<2k12
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k15
<2k4
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (11): AM (1), Access Managemen (2), Access Management (8), Access Management Java Policy Agent (1), Access Management Web Policy Agent (1), IDM (1), Identity Manager (1), Java Remote Connector Server (1), OpenAM (2), OpenICF (1), OpenIDM (2)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2024-03-277.27.0Forgerock Access Management 目录遍历Access Management SoftwareNot DefinedOfficial Fix0.000440.04CVE-2023-0582
2023-04-149.89.8ForgeRock Access Management 权限升级Access Management SoftwareNot DefinedNot Defined0.001040.00CVE-2022-3748
2023-03-306.06.0ForgeRock OpenIDM LDAP Connector 弱加密未知Not DefinedNot Defined0.001320.03CVE-2023-1656
2023-02-288.78.7ForgeRock Access Management Web Policy Agent 目录遍历Access Management SoftwareNot DefinedNot Defined0.001210.00CVE-2023-0339
2023-02-288.78.7ForgeRock Access Management Java Policy Agent 目录遍历Access Management SoftwareNot DefinedNot Defined0.001210.00CVE-2023-0511
2022-10-276.66.6ForgeRock Access Managemen LDAP Query 权限升级未知Not DefinedNot Defined0.000620.00CVE-2022-24670
2022-10-276.96.9ForgeRock Access Managemen Deployment 权限升级未知Not DefinedNot Defined0.000630.00CVE-2022-24669
2022-09-208.58.4ForgeRock IDM/Java Remote Connector Server LDAP Connector 权限升级Programming Language SoftwareNot DefinedOfficial Fix0.002890.00CVE-2022-0143
2022-02-158.48.3ForgeRock Access Management 权限升级Access Management SoftwareNot DefinedOfficial Fix0.004890.05CVE-2021-4201
2021-08-265.55.3ForgeRock Access Management SAML2 权限升级Access Management SoftwareNot DefinedOfficial Fix0.002210.02CVE-2021-37154

9 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 9 results.

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!