Openidm Project Openidm — known CVE vulnerabilities

Every CVE whose affected-product data names Openidm Project Openidm, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2017-7589 — CVSS 6.5 (medium): In OpenIDM through 4.0.0 before 4.5.0, the info endpoint may leak sensitive information upon a request by the "anonymous" user, as…
• CVE-2017-7590 — CVSS 6.1 (medium): OpenIDM through 4.0.0 and 4.5.0 is vulnerable to persistent cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by a…
• CVE-2017-7591 — CVSS 6.1 (medium): OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by the…