Finding #138
| Inventory item | apache-test 2.4.37 (software, apache) |
|---|---|
| Title | ForgeRock Access Management (AM): ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability |
| Match | keyword / confidence low |
| Status | new |
| First seen | 2026-06-11T07:35:12Z |
| Last updated | 2026-06-11T07:35:12Z |
| Source advisory | ForgeRock Access Management (AM): ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame) to execute code in the context of the current user (unless ForgeRock AM is running as root user, which the vendor does not recommend). |