Package · Maven

org.openidentityplatform.openam:openam-core

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.3

CVE-2026-44202

OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the /sessionservice addSessionListener operation allows an authenticated user to register an arbitrary notification URL without requiring an administrative or application clien…

OpenIdentityPlatform OpenAM openam org.openidentityplatform.openam:openam-core Ubuntu Maven

Sep 15, 2026
Medium 5.3

CVE-2022-34298 Public exploit

NT auth module vulnerability in OpenAM

The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."

org.openidentityplatform.openam:openam-core Maven

Jun 22, 2022