openidentityplatform

Top products

The 15 most recently published vulnerabilities affecting openidentityplatform.

• CVE-2026-46495OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMISep 15, 2026
• CVE-2026-48717OpenAM OAuth Authorization Bypass via PKCE ChallengeSep 15, 2026
• CVE-2026-47426OpenAM OAuth Client Impersonation via JWKS Resolver CacheSep 15, 2026
• CVE-2026-47424OpenAM Authenticated RCE via Groovy Sandbox EscapeSep 15, 2026
• CVE-2026-41573OpenAM LDAP Injection via `_queryId` ParameterSep 15, 2026
• CVE-2026-62280OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page6.1Sep 15, 2026
• CVE-2026-45051OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator StorageSep 15, 2026
• CVE-2026-62263OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypassSep 15, 2026
• CVE-2026-46623OpenAM Account Takeover via Unverified Password Change in OAuth2 ModuleSep 15, 2026
• CVE-2026-46619OpenAM Authentication Bypass via MSISDN LDAP InjectionSep 15, 2026
• CVE-2026-46498OpenAM Arbitrary OAuth Token Minting via Push RegistrationSep 15, 2026
• CVE-2026-45794OpenAM Unsafe Java Deserialization via SNSSep 15, 2026
• CVE-2026-45048OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC8.5Sep 15, 2026
• CVE-2026-44203OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)Sep 15, 2026
• CVE-2026-44202OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`Sep 15, 2026