Vendor

org.openidentityplatform.opendj

1 known vulnerabilities.

Products

opendj-server-legacy 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.2

CVE-2026-46495

OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.1, the JMX RMI connector in opendj-server-legacy/src/main/java/org/opends/server/protocols/jmx/RmiConnector.java processes attacker-controlled credential objects before authentication without a res…

OpenIdentityPlatform org.openidentityplatform.opendj OpenDJ opendj-server-legacy Maven

Sep 15, 2026