org.openidentityplatform.openam:openam-core
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- Maven
- Vulnerability status
- affected by 5 advisory(ies)
Advisories (5)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-c556-q2mh-477v OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice` | < 16.1.1 | Affected |
| GHSA-fpmh-vx4h-xc33 OpenAM Insecure SSO Cookie Initialization | < 16.1.1 | Affected |
| GHSA-px3r-27qc-hx5g NT auth module vulnerability in OpenAM | < 14.6.6 | Affected |
| GHSA-vvhj-w2jq-263q OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC | < 16.1.1 | Affected |
| GHSA-wg5r-wc3x-39vc OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback | < 16.1.2 | Affected |
Sources
| Source | Licence |
|---|