Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.7%	CVE-2022-0143LDAP Connector · Improper Access Control Critical9.3EPSS 0.7%2022-09-19CVE Database V5CVE-2022-0143 When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS) EPSS 0.7%Vulnerability ForgeRock #cwe-284	CVE Database V5	2022-09-19
Critical	9.8	KEVEPSS 99%	CVE-2021-35464Access Management (AM) · ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability Critical9.8KEVEPSS 99%2021-11-03CISA KEVCVE-2021-35464 CVE-2021-35464 is a remote code execution vulnerability in ForgeRock Access Management (AM) Core Server. An attacker can exploit this by sending a specially crafted HTTP request to one of three specific endpoints, allowing code execution with the privileges of the current user. The vendor advises against running ForgeRock AM as the root user to reduce risk. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. KEVEPSS 99%Vulnerability ForgeRock #exploited-in-the-wild	CISA KEV	2021-11-03

Showing 1–2 of 2 results