CVE record · 1 source
CVE-2026-121825
CVSS 6.1OpenAM (OpenAM Consortium Edition) 14.0.5 and earlier contains an open redirect vulnerability (CWE-601) in the Liberty ID-FF service provider single…
- Vendor
- OpenAM Consortium
- Product
- OpenAM (OpenAM Consortium Edition)
- CVSS v3.1
- 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weakness
- CWE-601
- Exposure class
- Identity
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
OpenAM (OpenAM Consortium Edition) 14.0.5 and earlier contains an open redirect vulnerability (CWE-601) in the Liberty ID-FF service provider single…
OpenAM (OpenAM Consortium Edition) 14.0.5 and earlier contains an open redirect vulnerability (CWE-601) in the Liberty ID-FF service provider single sign-on flow. The goto parameter of the /preLogin endpoint is stored as the…