OpeniamCVEs & Vulnerabilities
5 CVEs affecting Openiam products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
5 CVEs→ All vendors
Most Affected Products
openiam 5
CVE-2020-13422HIGH
OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions.
7 Apr 2021
8.1
CVSS
CVE-2020-13421CRITICAL
OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions.
7 Apr 2021
9.8
CVSS
CVE-2020-13420CRITICAL
OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script.
7 Apr 2021
9.8
CVSS
CVE-2020-13419MEDIUM
OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task.
7 Apr 2021
5.3
CVSS
CVE-2020-13418MEDIUM
OpenIAM before 4.2.0.3 allows XSS in the Add New User feature.
7 Apr 2021
6.1
CVSS
← PrevPage 1 / 1Next →