Openam vulnerabilities
1 known vulnerability in Openam from ForgeRock. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
1exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
ForgeRock Access Management (AM) Core Server Remote Code Execution Exploited
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* r