CVE Tools
Track your stack

Openidentityplatform

19 CVEs tracked since 2026. Since Sep 2026, none of them reached CISA KEV.

Openidentityplatform CVEs per month

Sep 2026 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Openidentityplatform CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-09190

Products

The products that kept showing up in Openidentityplatform's monthly top three, with their CVEs summed over those months.

  1. Openam181 month
  2. Opendj11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Openidentityplatform.

  1. CVE-2026-46495OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI—
  2. CVE-2026-48717OpenAM OAuth Authorization Bypass via PKCE Challenge—
  3. CVE-2026-47426OpenAM OAuth Client Impersonation via JWKS Resolver Cache—
  4. CVE-2026-47424OpenAM Authenticated RCE via Groovy Sandbox Escape—
  5. CVE-2026-41573OpenAM LDAP Injection via `_queryId` Parameter—
  6. CVE-2026-62280OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page6.1
  7. CVE-2026-45051OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage—
  8. CVE-2026-62263OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass—
  9. CVE-2026-46623OpenAM Account Takeover via Unverified Password Change in OAuth2 Module—
  10. CVE-2026-46619OpenAM Authentication Bypass via MSISDN LDAP Injection—
  11. CVE-2026-46498OpenAM Arbitrary OAuth Token Minting via Push Registration—
  12. CVE-2026-45794OpenAM Unsafe Java Deserialization via SNS—
  13. CVE-2026-45048OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC8.5
  14. CVE-2026-44203OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)—
  15. CVE-2026-44202OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`—

The record

Peak rank
#58 in Sep 2026
Busiest month shown
Sep 2026, 19 CVEs
Months with a KEV entry
0 since Sep 2026
Monthly snapshots
1 since 2026
Openidentityplatform's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store