Skip to content

CVE record · 1 source

CVE-2026-45049

CVSS 8.3

Open Access Management (OpenAM) is an access management solution.

Vendor: OpenIdentityPlatform
Product: OpenAM
CVSS v3.1: 8.3 AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS: 0.003 (p26)
Weakness: CWE-201
Exposure class: Identity

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

33

CVE NVD 2d ago

Open Access Management (OpenAM) is an access management solution.

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Sign-On` (`CDSSO`) servlet allows a logged-in user's raw OpenAM session token to be POSTed to an attacker-controlled URL.…

CVSS 8.3 Fix available CVE-2026-45049 OpenIdentityPlatform