Package · Maven

org.openidentityplatform.openam:openam-oauth2

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2026-62280

OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page

Open Access Management (OpenAM) is an access management solution. From 13.0.0 until 16.1.2, the OAuth2 authorize endpoint's display=wap consent page reflects request-derived values through ConsentRequiredResource and wap/authorize.ftl without HTML escaping. A…

OpenIdentityPlatform OpenAM openam org.openidentityplatform.openam:openam-oauth2 Ubuntu Maven

Sep 15, 2026