CVE-2021-37154

2021-08-2520:02:53

mitre

www.cve.org

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

JSON

In ForgeRock Access Management (AM) before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion.

References

backstage.forgerock.com/knowledge/kb/article/a55763454

www.forgerock.com/platform/access-management