Openidentityplatform Openam — known CVE vulnerabilities

Every CVE whose affected-product data names Openidentityplatform Openam, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-33439 — CVSS 9.8 (critical): Open Access Management (OpenAM) is an access management solution. Prior to 16.0.6, OpenIdentityPlatform OpenAM is vulnerable to…
• CVE-2023-37471 — CVSS 9.1 (critical): Open Access Management (OpenAM) is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements…
• CVE-2022-34298 — CVSS 5.3 (medium): The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."