PT-2026-51443 · Maven · Org.Openidentityplatform.Openam:Openam-Federation-Library

Publicado 2026-06-22 · Atualizado 2026-06-22 · CVE-2026-44793

OSV

CVSS v4.0

2.3

Baixa

Vetor base

AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Summary

Certain federation endpoints do not consistently apply output encoding when rendering user-supplied parameters into HTML responses. Under a non-default configuration used in some clustered deployments, this inconsistency can result in reflected XSS in the OpenAM origin without authentication.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-44793

GHSA-FHRQ-3GMX-P879

Produtos afetados

Org.Openidentityplatform.Openam:Openam-Federation-Library

Referências · 4

• https://github.com/OpenIdentityPlatform/OpenAM · Nota
• https://github.com/OpenIdentityPlatform/OpenAM/security/advisories/GHSA-fhrq-3gmx-p879 · Nota
• https://osv.dev/vulnerability/GHSA-fhrq-3gmx-p879 · Aviso do Fabricante
• https://github.com/OpenIdentityPlatform/OpenAM/releases/tag/16.1.1 · Nota