Openam Consortium Openam
2 CVEs affecting Openam Consortium Openam. Latest disclosed: 2025-09-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-0696 | High | 7.5 | 2019-02-13 | OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and… |
CVE-2025-8662 | Medium | 4.3 | 2025-09-02 | OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM… |