← Back

Openam

openam

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Openam
openam
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-8662
1Openam
1Openam
Jun 17, 2026
Sep 2, 2025
2.3 LOW· v4
4.3 MEDIUM· v3
N/A· v2
OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1.
CVE-2023-22320
1Openam
1Openam
Jun 17, 2026
Jan 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22). Furthermore, a crafted URL may be evaluated incorrectly.