Skip to content
OpenAdvisories

Vendor

OpenAM Consortium

6 known vulnerabilities.

Products

OpenAM 2 OpenAM (OpenAM Consortium Edition) 2 OpenAM Web Policy Agent (OpenAM Consortium Edition) 1 OpenAM (Open Source Edition) 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-121825

    Open redirect in the Liberty ID-FF service provider single sign-on flow

    OpenAM (OpenAM Consortium Edition) 14.0.5 and earlier contains an open redirect vulnerability (CWE-601) in the Liberty ID-FF service provider single sign-on flow. The goto parameter of the /preLogin endpoint is stored as the RelayState of the Liberty ID-FF au…

    OpenAM Consortium OpenAM (OpenAM Consortium Edition)