OpenIdentityPlatform OpenAM
32 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-45049 | < 16.1.1 | OpenAM Session Hijacking via CDSSO | HIGH 8.3 | |||
| CVE-2026-105122 | < 16.1.3 | OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-105121 | < 16.1.3 | OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-105120 | < 16.1.3 | OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-105119 | < 16.1.3 | OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows | HIGH 7.6 | 0.2 % | ||
| CVE-2026-105118 | < 16.1.3 | OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession | LOW 2.3 | 0.1 % | ||
| CVE-2026-105117 | < 16.1.3 | OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-105116 | < 16.1.3 | OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-105115 | < 16.1.3 | OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface | HIGH 8.8 | 0.5 % | ||
| CVE-2026-105114 | < 16.1.3 | OpenAM before 16.1.3 Reflected XSS via OAuth2 Authorization Error Page | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-48717 | < 16.1.1 | OpenAM OAuth Authorization Bypass via PKCE Challenge | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-47426 | < 16.1.1 | OpenAM OAuth Client Impersonation via JWKS Resolver Cache | HIGH 7.6 | 0.6 % | ||
| CVE-2026-47424 | < 16.1.1 | OpenAM Authenticated RCE via Groovy Sandbox Escape | HIGH 7.5 | 0.5 % | ||
| CVE-2026-41573 | < 16.1.1 | OpenAM LDAP Injection via `_queryId` Parameter | HIGH 7.1 | 0.5 % | ||
| CVE-2026-62280 | >= 13.0.0, < 16.1.2 | OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-45051 | < 16.1.1 | OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage | CRITICAL 9.2 | 0.7 % | ||
| CVE-2026-62263 | < 16.1.2 | OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass | CRITICAL 9.2 | 0.9 % | ||
| CVE-2026-46623 | < 16.1.1 | OpenAM Account Takeover via Unverified Password Change in OAuth2 Module | HIGH 7.4 | 0.7 % | ||
| CVE-2026-46619 | < 16.1.1 | OpenAM Authentication Bypass via MSISDN LDAP Injection | CRITICAL 9.3 | 1.0 % | ||
| CVE-2026-46498 | < 16.1.1 | OpenAM Arbitrary OAuth Token Minting via Push Registration | HIGH 7.6 | 0.4 % | ||
| CVE-2026-45794 | < 16.1.1 | OpenAM Unsafe Java Deserialization via SNS | HIGH 7.7 | 0.6 % | ||
| CVE-2026-45048 | < 16.1.1 | OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC | HIGH 8.5 | 0.4 % | ||
| CVE-2026-44203 | < 16.1.1 | OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl) | HIGH 8.3 | 0.6 % | ||
| CVE-2026-44202 | < 16.1.1 | OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice` | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-62379 | < 16.1.2 | OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback | CRITICAL 9.8 | 1.1 % | ||
| CVE-2026-53660 | < 16.1.1 | OpenAM Insecure SSO Cookie Initialization | HIGH 7.4 | 0.4 % | ||
| CVE-2026-45052 | < 16.1.1 | OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints | CRITICAL 9.3 | 0.8 % | ||
| CVE-2026-44793 | < 16.1.1 | OpenAM: Pre-authentication Reflected XSS in SAML2 Cluster Cookie-Hash-Redirect Path via `FSUtils.postToTarget` | HIGH 7.0 | 0.6 % | ||
| CVE-2026-33439 | < 16.0.6 | Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAM | CRITICAL 9.3 | 9.3 % | ||
| CVE-2025-64099 | < 16.0.0 | OpenAM allows use of arbitrary OIDC requested claims values in id_token and user_info | HIGH 8.1 | 0.4 % | ||
| CVE-2024-41667 | < 15.0.4 | OpenAM FreeMarker template injection | HIGH 8.8 | 3.5 % | ||
| CVE-2023-37471 | < 14.7.3 | User impersonation using SAMLv1.x SSO in Open Access Management | CRITICAL 9.8 | 1.3 % |