Filtered by vendor Forgerock Subscriptions
Total 22 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2014-7246 1 Forgerock 1 Openam 2024-11-21 N/A
The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 through 10.0.2, 10.1.0-Xpress, and 11.0.0 through 11.0.2, when deployed on a multi-server network, allows remote authenticated users to cause a denial of service (infinite loop) via a crafted cookie in a request.
CVE-2024-25566 1 Forgerock 1 Access Management 2024-11-08 6.1 Medium
An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allow an attacker to redirect end-users to malicious sites under their control, simplifying phishing attacks