Threats tagged 'ghsa-fhrq-3gmx-p879'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.0	EPSS 0.6%	CVE-2026-44793Org.openidentityplatform.openam:openam federation library: OpenAM SAML2 Cluster Cookie-Hash-Redirect Path has High7.0EPSS 0.6%2026-06-22GCVE DatabaseCVE-2026-44793 A reflected cross-site scripting (XSS) vulnerability exists in certain federation endpoints of OpenAM when deployed in a non-default clustered configuration. This occurs due to inconsistent output encoding of user-supplied parameters in HTML responses. The vulnerability affects OpenAM federation library versions prior to 16.1.1 and does not require authentication to exploit. A fix is available in version 16.1.1. EPSS 0.6%Report on CVE-2026-44793 Vulnerability CWE-79 #ghsa-fhrq-3gmx-p879 #maven	GCVE Database	2026-06-22

Page 1 of 1