Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-105122
  • github.com/openidentityplatform/openam
 OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri 2 days ago
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-105121
  • github.com/openidentityplatform/openam
 OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping 2 days ago
  • Fix available
  • Severity - 6.9 (Medium)
CVE-2026-105120
  • github.com/openidentityplatform/openam
 OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint 2 days ago
  • Fix available
  • Severity - 6.9 (Medium)
CVE-2026-105119
  • github.com/openidentityplatform/openam
 OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows 2 days ago
  • Fix available
  • Severity - 7.6 (High)
CVE-2026-105118
  • github.com/openidentityplatform/openam
 OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession 2 days ago
  • Fix available
  • Severity - 2.3 (Low)
CVE-2026-105117
  • github.com/openidentityplatform/openam
 OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions 2 days ago
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-105116
  • github.com/openidentityplatform/openam
 OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page 2 days ago
  • Fix available
  • Severity - 5.1 (Medium)
CVE-2026-105115
  • github.com/openidentityplatform/openam
 OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface 2 days ago
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-105114
  • github.com/openidentityplatform/openam
 OpenAM before 16.1.3 Reflected XSS via OAuth2 Authorization Error Page 2 days ago
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-46495
  • github.com/openidentityplatform/opendj
 OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI 15 Sep
  • Fix available
  • Severity - 9.2 (Critical)
CVE-2026-48717
  • github.com/openidentityplatform/openam
 OpenAM OAuth Authorization Bypass via PKCE Challenge 15 Sep
  • Fix available
  • Severity - 9.1 (Critical)
CVE-2026-47426
  • github.com/openidentityplatform/openam
 OpenAM OAuth Client Impersonation via JWKS Resolver Cache 15 Sep
  • Fix available
  • Severity - 7.6 (High)
CVE-2026-47424
  • github.com/openidentityplatform/openam
 OpenAM Authenticated RCE via Groovy Sandbox Escape 15 Sep
  • Fix available
  • Severity - 7.5 (High)
CVE-2026-41573
  • github.com/openidentityplatform/openam
 OpenAM LDAP Injection via `_queryId` Parameter 15 Sep
  • Fix available
  • Severity - 7.1 (High)
CVE-2026-62280
  • github.com/openidentityplatform/openam
 OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page 15 Sep
  • Fix available
  • Severity - 6.1 (Medium)
CVE-2026-45051
  • github.com/openidentityplatform/openam
 OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage 15 Sep
  • Fix available
  • Severity - 9.2 (Critical)
Load more...