OpenAM consortium vulnerabilities
We track 1 vulnerability in OpenAM consortium products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 10, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest OpenAM consortium vulnerabilities
- 7.5 High severity
OpenAM Web Policy Agent (OpenAM Consortium…: Improper Limitation of a Pathname to a Restricted Directory
OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22). Furthermore, a crafted URL may be evaluated incorrectly.