Package · Maven

org.openidentityplatform.openam:openam-auth-oauth2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.4

CVE-2026-46623

OpenAM Account Takeover via Unverified Password Change in OAuth2 Module

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the OAuth2 authentication module updates an existing local account with profile attributes that can include userPassword and inetUserStatus, rewriting the password to the usern…

OpenIdentityPlatform OpenAM openam org.openidentityplatform.openam:openam-auth-oauth2 Ubuntu Maven

Sep 15, 2026