9.8Kritisch
ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability
forgerock access management; forgerock openam
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* …
100%EPSS