Skip to content
OpenAdvisories

Product · OpenIdentityPlatform

OpenAM

51 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-33439 Public exploit Scanner template

    Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAM

    Open Access Management (OpenAM) is an access management solution. Prior to 16.0.6, OpenIdentityPlatform OpenAM is vulnerable to pre-authentication Remote Code Execution (RCE) via unsafe Java deserialization of the jato.clientSession HTTP parameter. This bypas…

    OpenIdentityPlatform OpenAM org.openidentityplatform.openam:openam Maven