Threats tagged 'ghsa-c556-q2mh-477v'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2026-44202Org.openidentityplatform.openam:openam core: OpenAM Authenticated Server-Side Request Forgery (SSRF) via Medium5.3EPSS 0.4%2026-06-22GCVE DatabaseCVE-2026-44202 OpenAM, an open-source IAM platform, has a server-side request forgery (SSRF) vulnerability in its /sessionservice endpoint. Authenticated users can register URLs for session event notifications without sufficient restrictions, allowing outbound requests to attacker-controlled destinations. This may expose session-related data. The vulnerability affects versions prior to 16.1.1 and has a high severity score of 8.6. A fix is available in version 16.1.1. EPSS 0.4%Report on CVE-2026-44202 Vulnerability CWE-918 #ghsa-c556-q2mh-477v #maven	GCVE Database	2026-06-22

Page 1 of 1