Low · 2.3 CVE-2025-8662 EUVD-2025-26407GHSA-h8xh-grcg-wm4h

OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This i…

Published Sep 2, 2025 · Updated Sep 3, 2025 · Assigned by openam-jp

Vendor: OpenAM Consortium Product: OpenAM

Description

OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1.

Affected products

Vendor	Product	Affected	Fixed
OpenAM consortium	OpenAM	14.0.0 – ≤ 14.0.1	—

References

https://openam-jp.github.io/Advisories/CVE-2025-8662/