OpenAM Consortium vulnerabilities

5 published CVEs name OpenAM Consortium among the affected products.

Critical 0High 2Medium 2Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2025-8662
OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM:…
OpenAM consortium · OpenAM
Low2.3
CVE-2023-22320
OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22).…
OpenAM consortium · OpenAM Web Policy Agent (OpenAM Consortium Edition)
High7.5
CVE-2022-31735
OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server…
OpenAM consortium · OpenAM (OpenAM Consortium Edition)
Medium6.1
CVE-2019-5915
Open redirect vulnerability in OpenAM (Open Source Edition) 13.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks…
OpenAM Consortium · OpenAM (Open Source Edition)
Medium6.1
CVE-2018-0696
OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and…
OpenAM Consortium · OpenAM
High7.5