2 matches found
CVE-2026-41573
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection passes the queryId parameter from /json/realm/users to CrestQuery with escapeQueryId disabled, bypassing protection added for CVE-2021-29156. The unescaped value reaches...
7.1CVSS0.00496EPSS
SaveExploits0References3
CVE-2026-41573 OpenAM LDAP Injection via `_queryId` Parameter
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection passes the queryId parameter from /json/realm/users to CrestQuery with escapeQueryId disabled, bypassing protection added for CVE-2021-29156. The unescaped value reaches...
7.1CVSS0.00496EPSS
SaveExploits0References3
20