Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

OpenIdentityPlatform Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-46495`OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI	Exploitation statusNot known exploited	FixYes	Affected productOpenDJ	Published09/15/2026	SeverityCritical
`CVE-2026-48717`OpenAM OAuth Authorization Bypass via PKCE Challenge	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityCritical
`CVE-2026-47426`OpenAM OAuth Client Impersonation via JWKS Resolver Cache	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityHigh
`CVE-2026-47424`OpenAM Authenticated RCE via Groovy Sandbox Escape	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityHigh
`CVE-2026-41573`OpenAM LDAP Injection via `_queryId` Parameter	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityHigh
`CVE-2026-62280`OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityMedium
`CVE-2026-45051`OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityCritical
`CVE-2026-62263`OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityCritical
`CVE-2026-46623`OpenAM Account Takeover via Unverified Password Change in OAuth2 Module	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityHigh
`CVE-2026-46619`OpenAM Authentication Bypass via MSISDN LDAP Injection	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityCritical
`CVE-2026-46498`OpenAM Arbitrary OAuth Token Minting via Push Registration	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityHigh
`CVE-2026-45794`OpenAM Unsafe Java Deserialization via SNS	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityHigh
`CVE-2026-45048`OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityHigh
`CVE-2026-44203`OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityHigh
`CVE-2026-44202`OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityMedium
`CVE-2026-62379`OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityCritical
`CVE-2026-53660`OpenAM Insecure SSO Cookie Initialization	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityHigh
`CVE-2026-45052`OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityCritical
`CVE-2026-44793`OpenAM: Pre-authentication Reflected XSS in SAML2 Cluster Cookie-Hash-Redirect Path via `FSUtils.postToTarget`	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published09/15/2026	SeverityHigh
`CVE-2026-73644`OpenDJ: Authorization bypass in SASL PLAIN allowing a `proxied-auth` holder to impersonate any resolvable non-root user without an ACI proxy grant	Exploitation statusNot known exploited	FixYes	Affected productOpenDJ	Published08/13/2026	SeverityCritical
`CVE-2026-33439`Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAM	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published04/07/2026	SeverityCritical
`CVE-2025-64099`OpenAM allows use of arbitrary OIDC requested claims values in id_token and user_info	Exploitation statusNot known exploited	FixNot confirmed	Affected productOpenAM	Published11/12/2025	SeverityHigh
`CVE-2025-27497`OpenDJ Denial of Service (Dos) using alias loop	Exploitation statusPublic exploit	FixYes	Affected productOpenDJ	Published03/05/2025	SeverityHigh
`CVE-2024-41667`OpenAM FreeMarker template injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productOpenAM	Published07/24/2024	SeverityHigh
`CVE-2023-37471`User impersonation using SAMLv1.x SSO in Open Access Management	Exploitation statusNot known exploited	FixYes	Affected productOpenAM	Published07/20/2023	SeverityCritical
`CVE-2022-34298`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published06/22/2022	SeverityUnknown

26 / 26 Results

All vulnerabilities loaded

Security vulnerabilities from OpenIdentityPlatform

OpenIdentityPlatform

How many security vulnerabilities does OpenIdentityPlatform have?

Which OpenIdentityPlatform product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular OpenIdentityPlatform products

OpenAM

OpenDJ