Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-46495
  • github.com/openidentityplatform/opendj
 OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI 15 Sep
  • Fix available
  • Severity - 9.2 (Critical)
CVE-2026-48717
  • github.com/openidentityplatform/openam
 OpenAM OAuth Authorization Bypass via PKCE Challenge 15 Sep
  • Fix available
  • Severity - 9.1 (Critical)
CVE-2026-47426
  • github.com/openidentityplatform/openam
 OpenAM OAuth Client Impersonation via JWKS Resolver Cache 15 Sep
  • Fix available
  • Severity - 7.6 (High)
CVE-2026-47424
  • github.com/openidentityplatform/openam
 OpenAM Authenticated RCE via Groovy Sandbox Escape 15 Sep
  • Fix available
  • Severity - 7.5 (High)
CVE-2026-41573
  • github.com/openidentityplatform/openam
 OpenAM LDAP Injection via `_queryId` Parameter 15 Sep
  • Fix available
  • Severity - 7.1 (High)
CVE-2026-62280
  • github.com/openidentityplatform/openam
 OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page 15 Sep
  • Fix available
  • Severity - 6.1 (Medium)
CVE-2026-45051
  • github.com/openidentityplatform/openam
 OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage 15 Sep
  • Fix available
  • Severity - 9.2 (Critical)
CVE-2026-62263
  • github.com/openidentityplatform/openam
 OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass 15 Sep
  • Fix available
  • Severity - 9.2 (Critical)
CVE-2026-46623
  • github.com/openidentityplatform/openam
 OpenAM Account Takeover via Unverified Password Change in OAuth2 Module 15 Sep
  • Fix available
  • Severity - 7.4 (High)
CVE-2026-46619
  • github.com/openidentityplatform/openam
 OpenAM Authentication Bypass via MSISDN LDAP Injection 15 Sep
  • Fix available
  • Severity - 9.3 (Critical)
CVE-2026-46498
  • github.com/openidentityplatform/openam
 OpenAM Arbitrary OAuth Token Minting via Push Registration 15 Sep
  • Fix available
  • Severity - 7.6 (High)
CVE-2026-45794
  • github.com/openidentityplatform/openam
 OpenAM Unsafe Java Deserialization via SNS 15 Sep
  • Fix available
  • Severity - 7.7 (High)
CVE-2026-45048
  • github.com/openidentityplatform/openam
 OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC 15 Sep
  • Fix available
  • Severity - 8.5 (High)
CVE-2026-44203
  • github.com/openidentityplatform/openam
 OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl) 15 Sep
  • Fix available
  • Severity - 8.3 (High)
CVE-2026-44202
  • github.com/openidentityplatform/openam
 OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice` 15 Sep
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-62379
  • github.com/openidentityplatform/openam
 OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback 15 Sep
  • Fix available
  • Severity - 9.8 (Critical)
Load more...