CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

RedhatCVE•added 2025/05/22 7:22 a.m.•10 views

CVE-2018-7272

The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...

6.5CVSS6.3AI score0.00892EPSS

Exploits0References1

NVD•added 2018/02/21 12:29 a.m.•17 views

CVE-2018-7272

The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...

6.5CVSS6.2AI score0.00892EPSS

Exploits0References2

Prion•added 2018/02/21 12:29 a.m.•15 views

Cross site request forgery (csrf)

The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...

4CVSS6.2AI score0.00892EPSS

Exploits0References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by