Wso2 Forgerock Key Manager Component
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Wso2 Forgerock Key Manager Component.
By the Year
In 2026 there have been 1 vulnerability in Wso2 Forgerock Key Manager Component with an average score of 5.4 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 5.40 |
It may take a day or so for new Forgerock Key Manager Component vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Wso2 Forgerock Key Manager Component Security Vulnerabilities
ForgeRock OIDC Client Refresh-Token -> Access Token Exploit
CVE-2025-7043
5.4 - Medium
- October 19, 2026
The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid access token, enabling its use for consuming protected resources. This bypasses the intended security control that requires valid client credentials in addition to a refresh token to obtain a new access token. An attacker who obtains a stolen or exposed refresh token can leverage this vulnerability to directly access protected resources. This is possible because the standard security flow requiring client credentials to exchange a refresh token for an access token is circumvented.
AuthZ
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Wso2 Forgerock Key Manager Component or by Wso2? Click the Watch button to subscribe.
