Package · Maven

org.openidentityplatform.openam:openam-core-rest

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.1

CVE-2026-41573

OpenAM LDAP Injection via `_queryId` Parameter

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection() passes the _queryId parameter from /json/{realm}/users to CrestQuery with escapeQueryId disabled, bypassing protection added for CVE-2021-2…

OpenIdentityPlatform OpenAM openam org.openidentityplatform.openam:openam-core-rest Ubuntu Maven

Sep 15, 2026