Openiam

openiam

5 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-13422 1Openiam 1Openiam Jun 17, 2026 Apr 6, 2021 N/A· v4 8.1 HIGH· v3 5.5 MEDIUM· v2 OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions.
CVE-2020-13421 1Openiam 1Openiam Jun 17, 2026 Apr 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions.
CVE-2020-13420 1Openiam 1Openiam Jun 17, 2026 Apr 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script.
CVE-2020-13419 1Openiam 1Openiam Jun 17, 2026 Apr 6, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task.
CVE-2020-13418 1Openiam 1Openiam Jun 17, 2026 Apr 6, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 OpenIAM before 4.2.0.3 allows XSS in the Add New User feature.