Read the docs

Osstech

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Osstech records in CISA KEV

No Osstech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openam 4 records MEDIUM

Records

4 records

TI-2017-07971 CVE-2017-10873 · GHSA-4rxj-vw6j-qqrf

Improper authentication in OpenAM

Priority MEDIUM 40

OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02625 Published 2017-11-02 No fix listed CWE-287
TI-2018-00651 CVE-2018-0696 · GHSA-mp8r-jgrr-9j4x

Weak password recovery in OpenAM

Priority LOW 35

OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.

CVSS 3.0HIGH 7.5 Network Low privileges No interaction EPSS 0.01057 Published 2019-02-13 No fix listed CWE-640
TI-2019-04211 CVE-2019-5915 · GHSA-r433-3rc5-gp93

Open redirect in OpenAM

Priority LOW 29

Open redirect vulnerability in OpenAM (Open Source Edition) 13.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01099 Published 2019-02-13 No fix listed CWE-601
TI-2022-13631 CVE-2022-31735 · GHSA-f4f7-96rj-qrp5

Open redirect in OpenAM

Priority LOW 28

OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00547 Published 2022-09-15 No fix listed CWE-601
Open these records in search →