Openam Consortium

6 CVEs in 4 Openam Consortium products, including Openam, Openam (Openam Consortium Edition), Openam (Open Source Edition).

Openam Consortium products with known CVEs

ProductCVEs
Openam2
Openam (Openam Consortium Edition)2
Openam (Open Source Edition)1
Openam Web Policy Agent (Openam Consortium Edition)1
Openam Consortium CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-121825Medium6.12026-11-09OpenAM (OpenAM Consortium Edition) 14.0.5 and earlier contains an open redirect vulnerability (CWE-601) in the Liberty ID-FF service provider single sign-on fl…
CVE-2025-8662Medium4.32025-09-02OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM…
CVE-2023-22320High7.52023-01-10OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22). Fu…
CVE-2022-31735Medium6.12022-09-15OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server thr…
CVE-2019-5915Medium6.12019-02-13Open redirect vulnerability in OpenAM (Open Source Edition) 13.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks…
CVE-2018-0696High7.52019-02-13OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and…