Read the docs

Openam

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Openam records in CISA KEV

No Openam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openam 2 records LOW

Records

2 records

TI-2023-08585 CVE-2023-22320 · GHSA-q9vj-6cqq-wmgg

Path traversal in OpenAM Web Policy Agent

Priority LOW 34

OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00748 Published 2023-01-10 No fix listed CWE-22
TI-2025-07929 CVE-2025-8662 · GHSA-h8xh-grcg-wm4h

Improper input validation in OpenAM

Priority LOW 12

OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00283 Published 2025-09-02 No fix listed CWE-20
Open these records in search →