# cve.now: Openidentityplatform

The newest entries naming Openidentityplatform as an affected vendor (up to 200), of 54 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-123553](https://cve.now/CVE-2026-123553.md): OpenAM before 16.1.4 Default Credentials in Built-in Accounts Allow Unauthenticated Login (CVSS 6.9)
- [CVE-2026-123552](https://cve.now/CVE-2026-123552.md): OpenAM before 16.1.4 SSRF and CRL Tampering via Certificate CRL Distribution Point (CVSS 6.3)
- [CVE-2026-123551](https://cve.now/CVE-2026-123551.md): OpenAM 14.0.0 before 16.1.4 Session Token Disclosure via Notification WebSocket (CVSS 10.0)
- [CVE-2026-123550](https://cve.now/CVE-2026-123550.md): OpenAM before 16.1.4 SAML Authentication Bypass via Unsigned Assertions (CVSS 9.3)
- [CVE-2026-123549](https://cve.now/CVE-2026-123549.md): OpenAM before 16.1.4 Privilege Escalation via Self-Registration Attribute Bypass (CVSS 9.3)
- [CVE-2026-123548](https://cve.now/CVE-2026-123548.md): OpenAM before 16.1.4 Open Redirect via WS-Federation and SAML v2.0 Pages (CVSS 2.3)
- [CVE-2026-123547](https://cve.now/CVE-2026-123547.md): OpenAM before 16.1.4 Open Redirect via SAML v2.0 RelayState (CVSS 2.3)
- [CVE-2026-123546](https://cve.now/CVE-2026-123546.md): OpenAM before 16.1.4 Open Redirect and XSS via goto and gotoOnFail (CVSS 5.3)
- [CVE-2026-123545](https://cve.now/CVE-2026-123545.md): OpenAM 14.5.1 before 16.1.4 CSRF in OAuth 2.0 Device Flow (CVSS 7.1)
- [CVE-2026-123544](https://cve.now/CVE-2026-123544.md): OpenAM before 16.1.4 Insufficient Response Validation in Internal SOAP Channel (CVSS 6.1)
- [CVE-2026-123543](https://cve.now/CVE-2026-123543.md): OpenAM before 16.1.4 Unauthenticated DoS via Unbounded Java Deserialisation (CVSS 8.7)
- [CVE-2026-123542](https://cve.now/CVE-2026-123542.md): OpenAM before 16.1.4 PKCE Bypass in OAuth 2.0 Device Authorization Flow (CVSS 7.6)
- [CVE-2026-123541](https://cve.now/CVE-2026-123541.md): OpenAM before 16.1.4 Open Redirect via SAML 1.x Trusted-Partner Matching (CVSS 5.3)
- [CVE-2026-123540](https://cve.now/CVE-2026-123540.md): OpenAM before 16.1.4 Incomplete Attribute Encoding in SAML 1.x Form POST (CVSS 2.0)
- [CVE-2026-123539](https://cve.now/CVE-2026-123539.md): OpenAM before 16.1.4 Stored XSS via OAuth 2.0 Consent Page Display Name (CVSS 4.8)
- [CVE-2026-123538](https://cve.now/CVE-2026-123538.md): OpenAM before 16.1.4 SAML 1.x Signature Verification Issuer Impersonation (CVSS 7.5)
- [CVE-2026-123537](https://cve.now/CVE-2026-123537.md): OpenAM before 16.1.4 SSRF via UMA Scope Description URLs (CVSS 5.3)
- [CVE-2026-123536](https://cve.now/CVE-2026-123536.md): OpenAM before 16.1.4 SSRF via Federation Configuration Wizard Metadata URLs (CVSS 5.1)
- [CVE-2026-46560](https://cve.now/CVE-2026-46560.md): OpenAM Authentication Bypass via RADIUS Spoofing (CVSS 7.5)
- [CVE-2026-45049](https://cve.now/CVE-2026-45049.md): OpenAM Session Hijacking via CDSSO (CVSS 8.3)
- [CVE-2026-105122](https://cve.now/CVE-2026-105122.md): OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks\_uri (CVSS 5.3)
- [CVE-2026-105121](https://cve.now/CVE-2026-105121.md): OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping (CVSS 6.9)
- [CVE-2026-105120](https://cve.now/CVE-2026-105120.md): OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint (CVSS 6.9)
- [CVE-2026-105119](https://cve.now/CVE-2026-105119.md): OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows (CVSS 7.6)
- [CVE-2026-105118](https://cve.now/CVE-2026-105118.md): OpenAM before 16.1.3 Open Redirect via Unverified id\_token\_hint in endSession (CVSS 2.3)
- [CVE-2026-105117](https://cve.now/CVE-2026-105117.md): OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions (CVSS 5.3)
- [CVE-2026-105116](https://cve.now/CVE-2026-105116.md): OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page (CVSS 5.1)
- [CVE-2026-105115](https://cve.now/CVE-2026-105115.md): OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface (CVSS 8.8)
- [CVE-2026-105114](https://cve.now/CVE-2026-105114.md): OpenAM before 16.1.3 Reflected XSS via OAuth2 Authorization Error Page (CVSS 5.3)
- [CVE-2026-46495](https://cve.now/CVE-2026-46495.md): OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI (CVSS 9.2)
- [CVE-2026-48717](https://cve.now/CVE-2026-48717.md): OpenAM OAuth Authorization Bypass via PKCE Challenge (CVSS 9.1)
- [CVE-2026-47426](https://cve.now/CVE-2026-47426.md): OpenAM OAuth Client Impersonation via JWKS Resolver Cache (CVSS 7.6)
- [CVE-2026-47424](https://cve.now/CVE-2026-47424.md): OpenAM Authenticated RCE via Groovy Sandbox Escape (CVSS 7.5)
- [CVE-2026-41573](https://cve.now/CVE-2026-41573.md): OpenAM LDAP Injection via \`\_queryId\` Parameter (CVSS 7.1)
- [CVE-2026-62280](https://cve.now/CVE-2026-62280.md): OpenAM Reflected XSS in the OAuth2/OIDC \`wap\` consent page (CVSS 6.1)
- [CVE-2026-45051](https://cve.now/CVE-2026-45051.md): OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage (CVSS 9.2)
- [CVE-2026-62263](https://cve.now/CVE-2026-62263.md): OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth\>1 bypass (CVSS 9.2)
- [CVE-2026-46623](https://cve.now/CVE-2026-46623.md): OpenAM Account Takeover via Unverified Password Change in OAuth2 Module (CVSS 7.4)
- [CVE-2026-46619](https://cve.now/CVE-2026-46619.md): OpenAM Authentication Bypass via MSISDN LDAP Injection (CVSS 9.3)
- [CVE-2026-46498](https://cve.now/CVE-2026-46498.md): OpenAM Arbitrary OAuth Token Minting via Push Registration (CVSS 7.6)
- [CVE-2026-45794](https://cve.now/CVE-2026-45794.md): OpenAM Unsafe Java Deserialization via SNS (CVSS 7.7)
- [CVE-2026-45048](https://cve.now/CVE-2026-45048.md): OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC (CVSS 8.5)
- [CVE-2026-44203](https://cve.now/CVE-2026-44203.md): OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response\_mode=form\_post via state parameter (FormPostResponse.ftl) (CVSS 8.3)
- [CVE-2026-44202](https://cve.now/CVE-2026-44202.md): OpenAM Authenticated Server-Side Request Forgery (SSRF) via \`/sessionservice\` (CVSS 5.3)
- [CVE-2026-62379](https://cve.now/CVE-2026-62379.md): OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback (CVSS 9.8)
- [CVE-2026-53660](https://cve.now/CVE-2026-53660.md): OpenAM Insecure SSO Cookie Initialization (CVSS 7.4)
- [CVE-2026-45052](https://cve.now/CVE-2026-45052.md): OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints (CVSS 9.3)
- [CVE-2026-44793](https://cve.now/CVE-2026-44793.md): OpenAM: Pre-authentication Reflected XSS in SAML2 Cluster Cookie-Hash-Redirect Path via \`FSUtils.postToTarget\` (CVSS 7.0)
- [CVE-2026-73644](https://cve.now/CVE-2026-73644.md): OpenDJ: Authorization bypass in SASL PLAIN allowing a \`proxied-auth\` holder to impersonate any resolvable non-root user without an ACI proxy grant (CVSS 9.6)
- [CVE-2026-33439](https://cve.now/CVE-2026-33439.md): Pre-Authentication Remote Code Execution via \`jato.clientSession\` Deserialization in OpenAM (CVSS 9.3)
- [CVE-2025-64099](https://cve.now/CVE-2025-64099.md): OpenAM allows use of arbitrary OIDC requested claims values in id\_token and user\_info (CVSS 8.1)
- [CVE-2025-27497](https://cve.now/CVE-2025-27497.md): OpenDJ Denial of Service (Dos) using alias loop (CVSS 8.7)
- [CVE-2024-41667](https://cve.now/CVE-2024-41667.md): OpenAM FreeMarker template injection (CVSS 8.8)
- [CVE-2023-37471](https://cve.now/CVE-2023-37471.md): User impersonation using SAMLv1.x SSO in Open Access Management (CVSS 9.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/openidentityplatform
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.