CVE-2017-14394

MEDIUM 6.1CVE-2017-14394 · Published 19/06/2019 · updated 17/06/2026

In short

CVE-2017-14394 is a MEDIUM (CVSS 6.1) vulnerability affecting access management (forgerock), openam (forgerock).
Chance of exploitation in the next 30 days (EPSS): 0.79%, higher than 56.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
access management forgerock	`≥ 5.0.0, ≤ 5.1.1`	No fix yet
openam forgerock	`≥ 13.5.0, ≤ 13.5.1`	No fix yet

Description

OAuth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access Management (AM) 5.0.0-5.1.1 does not correctly validate redirect_uri for some invalid requests, which allows attackers to perform phishing via an unvalidated redirect.

References

backstage.forgerock.com/knowledge/kb/article/a45958025 · Vendor Advisory

More vulnerabilities in access management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

access management

forgerock

≥ 5.0.0, ≤ 5.1.1

No fix yet

openam

forgerock

≥ 13.5.0, ≤ 13.5.1

No fix yet

More vulnerabilities in access management

See all →