cbcvebase.

Wso2 Forgerock Key Manager Component vulnerabilities

1 known vulnerability affecting wso2/forgerock_key_manager_component.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2025-7043P4MEDIUMCVSS 5.4≥ 1.0.0, < 1.0.0.3≥ 1.0.0, < 1.0.0.4+3 more2026-10-19
CVE-2025-7043 [MEDIUM] CWE-862 CVE-2025-7043: The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be t The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid access token, enabling its use for consuming protected resources. This bypasses the intended security control that requires valid client credentials in addition to a refresh token to obtain a new access token. An attacker who obtains
nvd