CVE-2020-13418: Improper Neutralization of Input During Web Page Generation

OpenIAM before 4.2.0.3 allows XSS in the Add New User feature...

PT-2021-9606

Name of the Vulnerable Software and Affected Versions OpenIAM versions prior to 4.2.0.3 Description The issue allows for XSS in the Add New User feature. Recommendations For versions prior to 4.2.0.3, update to version 4.2.0.3 or later to resolve the issue...

PT-2021-9609

Name of the Vulnerable Software and Affected Versions OpenIAM versions prior to 4.2.0.3 Description The issue is related to incorrect access control for certain actions, including Create User, Modify User Permissions, and Password Reset. Recommendations For versions prior to 4.2.0.3, update to...

Github OpenIAM Cross-Site Scripting Vulnerability

OpenIAM is a fully integrated identity and access management platform. A cross-site scripting vulnerability exists in the "Add New User" feature in OpenIAM versions prior to 4.2.0.3. No details of the vulnerability are available at this time...

OpenIAM security vulnerabilities

OpenIAM is a fully integrated identity and access management platform. A remote code execution vulnerability exists in OpenIAM versions prior to 4.2.0.3. An attacker can exploit this vulnerability to execute arbitrary code via Groovy Script...

PT-2021-9610 · Openiam · Openam

Name of the Vulnerable Software and Affected Versions: OpenIAM versions prior to 4.2.0.3 Description: The issue concerns a lack of permission verification for users attempting to perform administrative actions through the "/webconsole/rest/api/" endpoint. This means that users without proper...

CVE-2020-13420: Undefined Security Weakness

OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script...

CVE-2020-13422: Missing Authorization

OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/ administrative actions...

PT-2021-9607

Name of the Vulnerable Software and Affected Versions OpenIAM versions prior to 4.2.0.3 Description The issue allows Directory Traversal in the Batch task. Recommendations For versions prior to 4.2.0.3, update to version 4.2.0.3 or later to resolve the issue...

PT-2021-9608

Name of the Vulnerable Software and Affected Versions OpenIAM versions prior to 4.2.0.3 Description The issue allows remote attackers to execute arbitrary code via Groovy Script. Recommendations For versions prior to 4.2.0.3, update to version 4.2.0.3 or later to resolve the issue...