en
Open Identity Platform is an open-source community that maintains identity and access management software. Its stack includes access management, LDAP directory services, identity lifecycle management, and an identity gateway for organizations deploying identity infrastructure.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/20/2026, OpenIdentityPlatform recorded 29 security vulnerabilities in the last 90 days across 2 products, including 20 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, OpenAM had the most security vulnerabilities in the OpenIdentityPlatform ecosystem, with 27 vulnerabilities—approximately 93.1% of the provider's total vulnerabilities during this period.
CVE-2026-105122OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uriCVE-2026-105121OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm ScopingCVE-2026-105120OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST EndpointCVE-2026-105119OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid FlowsCVE-2026-105118OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession35 Results | Page 1 of 4
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityLow |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityCritical |