OpenAM consortium
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| OpenAM | 1 | – | Sep 2, 2025 |
| OpenAM (OpenAM Consortium Edition) | 1 | – | Sep 15, 2022 |
| OpenAM Web Policy Agent (OpenAM Consortium Edition) | 1 | – | Jan 10, 2023 |
Exploited and recent CVEs
- CVE-2025-8662 OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1. 0.3%
- CVE-2023-22320 OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22). Furthermore, a crafted URL may be evaluated 0.7%
- CVE-2022-31735 OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server through some specially crafted URL, the user 0.5%