← All credits

vharseko

19 vulnerability records and advisories credit this contributor.

CVE-2026-123542

OpenAM before 16.1.4 PKCE Bypass in OAuth 2.0 Device Authorization Flow

CVE-2026-123546

OpenAM before 16.1.4 Open Redirect and XSS via goto and gotoOnFail

CVE-2026-123550

OpenAM before 16.1.4 SAML Authentication Bypass via Unsigned Assertions

CVE-2026-123538

OpenAM before 16.1.4 SAML 1.x Signature Verification Issuer Impersonation

CVE-2026-123553

OpenAM before 16.1.4 Default Credentials in Built-in Accounts Allow Unauthenticated Login

CVE-2026-123552

OpenAM before 16.1.4 SSRF and CRL Tampering via Certificate CRL Distribution Point

CVE-2026-123551

OpenAM 14.0.0 before 16.1.4 Session Token Disclosure via Notification WebSocket

CVE-2026-123549

OpenAM before 16.1.4 Privilege Escalation via Self-Registration Attribute Bypass

CVE-2026-123548

OpenAM before 16.1.4 Open Redirect via WS-Federation and SAML v2.0 Pages

CVE-2026-123547

OpenAM before 16.1.4 Open Redirect via SAML v2.0 RelayState