OpenIdentityPlatform OpenAM

• CVE-2026-46560 High 7.5 OpenAM Authentication Bypass via RADIUS Spoofing 0.2%
• CVE-2026-45049 High 8.3 OpenAM Session Hijacking via CDSSO 0.3%
• CVE-2026-105122 Medium 5.4 OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri 0.2%
• CVE-2026-105121 Medium 4.9 OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping 0.3%
• CVE-2026-105120 Medium 4.9 OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint 0.3%
• CVE-2026-105119 Medium 6.8 OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows 0.2%
• CVE-2026-105118 Medium 4.7 OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession 0.1%
• CVE-2026-105117 Medium 6.1 OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions 0.2%
• CVE-2026-105116 Medium 6.1 OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page 0.2%
• CVE-2026-105115 High 8.6 OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface 0.5%
• CVE-2026-105114 Medium 6.1 OpenAM before 16.1.3 Reflected XSS via OAuth2 Authorization Error Page 0.2%
• CVE-2026-48717 Critical 9.1 OpenAM OAuth Authorization Bypass via PKCE Challenge 0.5%
• CVE-2026-47426 High 7.6 OpenAM OAuth Client Impersonation via JWKS Resolver Cache 0.6%
• CVE-2026-47424 High 7.5 OpenAM Authenticated RCE via Groovy Sandbox Escape 0.5%
• CVE-2026-41573 High 7.1 OpenAM LDAP Injection via `_queryId` Parameter 0.5%
• CVE-2026-62280 Medium 6.1 OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page 0.3%
• CVE-2026-45051 Critical 9.2 OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage 0.7%
• CVE-2026-62263 Critical 9.2 OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass 0.9%
• CVE-2026-46623 High 7.4 OpenAM Account Takeover via Unverified Password Change in OAuth2 Module 0.7%
• CVE-2026-46619 Critical 9.3 OpenAM Authentication Bypass via MSISDN LDAP Injection 1.0%
• CVE-2026-46498 High 7.6 OpenAM Arbitrary OAuth Token Minting via Push Registration 0.4%
• CVE-2026-45794 High 7.7 OpenAM Unsafe Java Deserialization via SNS 0.6%
• CVE-2026-45048 High 8.5 OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC 0.4%
• CVE-2026-44203 High 8.3 OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl) 0.6%
• CVE-2026-44202 Medium 5.3 OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice` 0.4%
• CVE-2026-62379 Critical 9.8 OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback 1.1%
• CVE-2026-53660 High 7.4 OpenAM Insecure SSO Cookie Initialization 0.4%
• CVE-2026-45052 Critical 9.3 OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints 0.8%
• CVE-2026-44793 High 7.0 OpenAM: Pre-authentication Reflected XSS in SAML2 Cluster Cookie-Hash-Redirect Path via `FSUtils.postToTarget` 0.6%
• CVE-2026-33439 Critical 9.3 Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAM 9.3%
• CVE-2025-64099 High 8.1 OpenAM allows use of arbitrary OIDC requested claims values in id_token and user_info 0.4%
• CVE-2024-41667 High 8.8 OpenAM FreeMarker template injection 3.5%
• CVE-2023-37471 Critical 9.1 User impersonation using SAMLv1.x SSO in Open Access Management 1.3%