Skip to content

CVE record · 1 source

CVE-2026-123545

CVSS 7.1

OpenAM from 14.5.1 before 16.1.4 contains a cross-site request forgery vulnerability in the OAuth 2.0 device authorization flow that allows attackers…

Vendor: OpenIdentityPlatform
Product: OpenAM
CVSS v3.1: 7.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Weakness: CWE-352
Exposure class: Identity

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

37

CVE NVD 2h ago

OpenAM from 14.5.1 before 16.1.4 contains a cross-site request forgery vulnerability in the OAuth 2.0 device authorization flow that allows attackers…

OpenAM from 14.5.1 before 16.1.4 contains a cross-site request forgery vulnerability in the OAuth 2.0 device authorization flow that allows attackers to approve device codes when consent is skipped for implied-consent clients.…

CVSS 7.1 CVE-2026-123545 OpenIdentityPlatform