6 Total advisories
6 Vulnerabilities
0 Malware
Vulnerabilities
UNKNOWN
CVE-2026-48717
OpenAM OAuth Authorization Bypass via PKCE Challenge
UNKNOWN
CVE-2026-47426
OpenAM OAuth Client Impersonation via JWKS Resolver Cache
UNKNOWN
CVE-2026-46498
OpenAM Arbitrary OAuth Token Minting via Push Registration
CRITICAL 9.3
CVE-2026-44203
OpenAM has pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)
UNKNOWN
CVE-2025-64099
OpenAM: Using arbitrary OIDC requested claims values in id_token and user_info is allowed
HIGH 8.8
CVE-2024-41667
OpenAM FreeMarker template injection
Ready to move
Start Securing
Free, no credit card | First findings in minutes