Login Request a demo
OP
Vendor
OpenIdentityPlatform
2 products with CVEs on record
34
CVEs
0
On KEV
9
New 30D
Products
OP
OpenAM
OpenIdentityPlatform
9.8
31 CVEs0 on KEV9 new
OP
OpenDJ
OpenIdentityPlatform
9.6
3 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-105122
OP
OpenAM
OpenIdentityPlatform
5.4
0%
Oct 3OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri
CVE-2026-105121
OP
OpenAM
OpenIdentityPlatform
4.9
0%
Oct 3OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping
CVE-2026-105120
OP
OpenAM
OpenIdentityPlatform
4.9
0%
Oct 3OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint
CVE-2026-105119
OP
OpenAM
OpenIdentityPlatform
6.8
0%
Oct 3OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows
CVE-2026-105118
OP
OpenAM
OpenIdentityPlatform
4.7
0%
Oct 3OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession
CVE-2026-105117
OP
OpenAM
OpenIdentityPlatform
6.1
0%
Oct 3OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions
CVE-2026-105116
OP
OpenAM
OpenIdentityPlatform
6.1
0%
Oct 3OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page
CVE-2026-105115
OP
OpenAM
OpenIdentityPlatform
8.6
0%
Oct 3OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface
CVE-2026-105114
OP
OpenAM
OpenIdentityPlatform
6.1
0%
Oct 3OpenAM before 16.1.3 Reflected XSS via OAuth2 Authorization Error Page
CVE-2026-46495
OP
OpenDJ
OpenIdentityPlatform
9.2
1%
Sep 15OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI
CVE-2026-48717
OP
OpenAM
OpenIdentityPlatform
9.1
1%
Sep 15OpenAM OAuth Authorization Bypass via PKCE Challenge
CVE-2026-47426
OP
OpenAM
OpenIdentityPlatform
7.6
1%
Sep 15OpenAM OAuth Client Impersonation via JWKS Resolver Cache
CVE-2026-47424
OP
OpenAM
OpenIdentityPlatform
7.5
0%
Sep 15OpenAM Authenticated RCE via Groovy Sandbox Escape
CVE-2026-41573
OP
OpenAM
OpenIdentityPlatform
7.1
0%
Sep 15OpenAM LDAP Injection via `_queryId` Parameter
CVE-2026-62280
OP
OpenAM
OpenIdentityPlatform
6.1
0%
Sep 15OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page
CVE-2026-45051
OP
OpenAM
OpenIdentityPlatform
9.2
1%
Sep 15OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage
CVE-2026-62263
OP
OpenAM
OpenIdentityPlatform
9.2
1%
Sep 15OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass
CVE-2026-46623
OP
OpenAM
OpenIdentityPlatform
7.4
1%
Sep 15OpenAM Account Takeover via Unverified Password Change in OAuth2 Module
CVE-2026-46619
OP
OpenAM
OpenIdentityPlatform
9.3
1%
Sep 15OpenAM Authentication Bypass via MSISDN LDAP Injection
CVE-2026-46498
OP
OpenAM
OpenIdentityPlatform
7.6
0%
Sep 15OpenAM Arbitrary OAuth Token Minting via Push Registration
CVE-2026-45794
OP
OpenAM
OpenIdentityPlatform
7.7
1%
Sep 15OpenAM Unsafe Java Deserialization via SNS
CVE-2026-45048
OP
OpenAM
OpenIdentityPlatform
8.5
0%
Sep 15OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC
CVE-2026-44203
OP
OpenAM
OpenIdentityPlatform
8.3
1%
Sep 15OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)
CVE-2026-44202
OP
OpenAM
OpenIdentityPlatform
5.3
0%
Sep 15OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`
CVE-2026-62379
OP
OpenAM
OpenIdentityPlatform
9.8
1%
Sep 15OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback
CVE-2026-53660
OP
OpenAM
OpenIdentityPlatform
7.4
0%
Sep 15OpenAM Insecure SSO Cookie Initialization
CVE-2026-45052
OP
OpenAM
OpenIdentityPlatform
9.3
1%
Sep 15OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints
CVE-2026-44793
OP
OpenAM
OpenIdentityPlatform
7.0
1%
Sep 15OpenAM: Pre-authentication Reflected XSS in SAML2 Cluster Cookie-Hash-Redirect Path via `FSUtils.postToTarget`
CVE-2026-73644
OP
OpenDJ
OpenIdentityPlatform
9.6
0%
Aug 13OpenDJ: Authorization bypass in SASL PLAIN allowing a `proxied-auth` holder to impersonate any resolvable non-root user without an ACI proxy grant
CVE-2026-33439
OP
OpenAM
OpenIdentityPlatform
9.8
9%
Apr 7Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAM
CVE-2025-64099
OP
OpenAM
OpenIdentityPlatform
8.1
0%
Nov 12OpenAM allows use of arbitrary OIDC requested claims values in id_token and user_info
CVE-2025-27497
OP
OpenDJ
OpenIdentityPlatform
8.7
0%
Mar 5OpenDJ Denial of Service (Dos) using alias loop
CVE-2023-37471
OP
Openam
Openidentityplatform
9.8
1%
Jul 20Open Access Management (OpenAM) is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements and Web Services Security
CVE-2022-34298
OP
Openam
Openidentityplatform
5.3
3%
Jun 23The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."