A security vulnerability has been discovered in supported versions of Access Management. The maximum severity of the issue in this advisory is Critical. This security advisory only applies to software deployments of the ForgeRock Identity Platform. This does not affect AM 7 and above. The vulnerability affects versions 6.0.x, 6.5.0, 65.2.x.x and 6.3; it also affects older unsupported versions: AM 5.x; OpenAM 9.x,. 10.x. On Tomcat, you can just restart the web application container to apply these changes.”]
Source: https://backstage.forgerock.com/knowledge/kb/article/a47894244