Sploitus

2 exploited vulnerabilities in Forgerock Openam

Vulnerabilities with publicly known exploits

Vendors
Amazon, Forgerock, Oracle
With known exploits
2
Affected Forgerock Access Management versions
< 6.5.4
Affected Forgerock Openam versions
< 14.6.3, 13.5.1

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2021-35464 10 exploits
CVSS 10.0 HIGH 2021-06-29FIX AVAILABLE
CVE-2021-29156 6 exploits
CVSS 7.5 HIGH 2021-03-25FIX AVAILABLE