Vulnerabilities in OpenIdentityPlatform

5 results

CVE-2026-33439CRITICALPre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAMEPSS 10.5%CVE-2024-41667HIGHOpenAM FreeMarker template injectionEPSS 3.5%CVE-2023-37471CRITICALUser impersonation using SAMLv1.x SSO in Open Access Management EPSS 1.0%CVE-2025-27497HIGHOpenDJ Denial of Service (Dos) using alias loopEPSS 0.4%CVE-2025-64099HIGHOpenAM allows use of arbitrary OIDC requested claims values in id_token and user_infoEPSS 0.3%