This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-123544 | BDVDB-2026-401901 Detail

OpenIdentityPlatformOpenAM

Description#

OpenAM before 16.1.4 and its client SDK fail to sufficiently validate responses on the internal server-to-server SOAP channel, allowing network-positioned attackers to affect integrity and availability. Attackers who intercept unencrypted traffic or control a site server can crash receiving processes, tamper with writable files, and possibly execute code.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact high. Attack vector: adjacent.

Weaknesses#

  • CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.