CyberSecBulletin

Org.openidentityplatform.opendj vulnerabilities

We track 1 vulnerability in Org.openidentityplatform.opendj products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.

1vulnerabilities
1critical
0high
0exploited
9.2average CVSS score

Latest Org.openidentityplatform.opendj vulnerabilities

  • 9.2 Critical severity

    OpenDJ: Deserialization of Untrusted Data

    CVE-2026-46495OpenIdentityPlatformEPSS 1.13%

    OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.1, the JMX RMI connector in opendj-server-legacy/src/main/java/org/opends/server/protocols/jmx/RmiConnector.java processes attacker-controlled credential objects before authentication without a rest