CVE-2026-123539Medium· 4.8▾ SunlitOpenAM before 16.1.4 contains a stored cross-site scripting vulnerability that allows privileged attackers to inject script by placing markup in a user's display name. When the victim reaches the OAuth 2.0 / OpenID Connect consent page, …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 26.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
OpenAM before 16.1.4 contains a stored cross-site scripting vulnerability that allows privileged attackers to inject script by placing markup in a user's display name. When the victim reaches the OAuth 2.0 / OpenID Connect consent page, the unencoded name executes script that can steal the OpenAM session cookie to impersonate the user.
OpenAM < 16.1.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-123546Medium· 6.1OpenAM before 16.1.4 Open Redirect and XSS via goto and gotoOnFail
CVE-2026-105116Medium· 6.1OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-submit page
CVE-2026-105114Medium· 6.1OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted parameters rendered unencoded on the OAuth2 authorization error page
CVE-2026-62280Medium· 6.1Open Access Management (OpenAM) is an access management solution
CVE-2026-44203High· 8.3Open Access Management (OpenAM) is an access management solution
CVE-2026-44793High· 7.0Open Access Management (OpenAM) is an access management solution