Vulnerability in Openidentityplatform Openam

CVE-2025-64099

Open Access Management (OpenAM) is an access management solution. In versions prior to 16.0.0, if the "claims_parameter_supported" parameter is activated, it is possible, thanks to the "oidc-claims-extension.groovy" script, to inject the v…

EPSS: 0.001 (17.4th percentile) — read the EPSS interpretation.