Approved changes feed: RSS · Atom

cpe:2.3:a:osstech:openam:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOsstech (f55fa4dc-6e81-5d2e-b677-b84cf67ba32c)
ProductOpenam (603ce37b-7b13-5c69-968d-90f83903c803)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/osstech-jp/openam purl2cpe 2026-06-01 10:12:28.235030
pkg:maven/org.forgerock.ce.openam/openam-core purl2cpe 2026-06-01 10:12:28.235033

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-5915 vulnerable 2026-06-08 05:14:08.233847 Details available
Open redirect vulnerability in OpenAM (Open Source Edition) 13.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page.
Published: 2019-02-13T18:00:00.000Z
Updated: 2024-08-04T20:09:23.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0696 vulnerable 2026-06-08 05:10:24.536648 Details available
OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.
Published: 2019-02-13T18:00:00.000Z
Updated: 2024-08-05T03:35:49.004Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.