Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.openidentityplatform.opendj:opendj-server-legacy

3 known vulnerabilities (2 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 critical, 1 high
Dependents
64
Registry
Maven Central

Advisories 3

  • CVE-2026-46495Critical 9.2

    OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

    Affected: fixed in 5.1.1.

  • CVE-2026-73644Critical 9.6

    OpenDJ: Authorization bypass in SASL PLAIN allowing a `proxied-auth` holder to impersonate any resolvable non-root user without an ACI…

    Affected: fixed in 5.1.2.

  • OpenDJ Denial of Service (Dos) using alias loop

    Affected: fixed in 4.9.3.