Vulnerabilities in ForgeRock Inc.

2 results
CVE-2022-3748CRITICALImproper authorization that can lead to account impersonationEPSS 0.9%CVE-2023-1656HIGHWhen the LDAP connector is started with StartTLS configured, LDAP BIND credentials are transmitted insecurely, prior to establishing the TLS connection.EPSS 0.3%