This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-123548 | BDVDB-2026-401905 Detail

OpenIdentityPlatformOpenAM

Description#

OpenIdentityPlatform OpenAM before 16.1.4 contains an open redirect because WS-Federation logout, SAML v2.0 logout and name-identifier management, SAML v2.0 identity provider finder, and some authentication pages do not check destination URLs against allowed lists. Attackers can craft OpenAM-domain links that send users to arbitrary external sites for phishing.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.