Package · Ubuntu

openam

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.1

CVE-2026-62280

OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page

Open Access Management (OpenAM) is an access management solution. From 13.0.0 until 16.1.2, the OAuth2 authorize endpoint's display=wap consent page reflects request-derived values through ConsentRequiredResource and wap/authorize.ftl without HTML escaping. A…

OpenIdentityPlatform OpenAM openam org.openidentityplatform.openam:openam-oauth2 Ubuntu Maven

Sep 15, 2026
Medium 5.3

CVE-2026-44202

OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the /sessionservice addSessionListener operation allows an authenticated user to register an arbitrary notification URL without requiring an administrative or application clien…

OpenIdentityPlatform OpenAM openam org.openidentityplatform.openam:openam-core Ubuntu Maven

Sep 15, 2026