Skip to content
OpenAdvisories

Vendor

OpenIdentityPlatform

54 known vulnerabilities.

Products

OpenAM 51 OpenDJ 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-33439 Public exploit

    Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAM

    Open Access Management (OpenAM) is an access management solution. Prior to 16.0.6, OpenIdentityPlatform OpenAM is vulnerable to pre-authentication Remote Code Execution (RCE) via unsafe Java deserialization of the jato.clientSession HTTP parameter. This bypas…

    OpenIdentityPlatform OpenAM org.openidentityplatform.openam:openam Maven