Skip to content
OpenAdvisories

Product · OpenIdentityPlatform

OpenDJ

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-46495

    OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

    OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.1, the JMX RMI connector in opendj-server-legacy/src/main/java/org/opends/server/protocols/jmx/RmiConnector.java processes attacker-controlled credential objects before authentication without a res…

    OpenIdentityPlatform org.openidentityplatform.opendj OpenDJ opendj-server-legacy Maven
  • Critical 9.6
    CVE-2026-73644

    OpenDJ: Authorization bypass in SASL PLAIN allowing a `proxied-auth` holder to impersonate any resolvable non-root user without an ACI proxy grant

    OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.2, the SASL PLAIN authorization identity path in opendj-server-legacy/src/main/java/org/opends/server/extensions/PlainSASLMechanismHandler.java checked the PROXIED_AUTH privilege but did not evalua…

    OpenIdentityPlatform OpenDJ org.openidentityplatform.opendj:opendj-server-legacy Maven