CVE-2023-0511: ForgeRock Java Policy Agents

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Relative Path Traversal vulnerability in ForgeRock Access Management Java Policy Agent allows Authentication Bypass. This issue affects Access Management Java Policy Agent: all versions up to 5.10.1

Affected products

• ForgeRock Java Policy Agents: up to and including 5.10.1

Published 2023-02-28. Last modified 2026-06-17.