Threats tagged 'ghsa-fq9h-c788-fx73'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 0.6%	CVE-2026-44203Org.openidentityplatform.openam:openam oauth2: OpenAM has pre-auth Reflected XSS in OAuth2 / OIDC High8.3EPSS 0.6%2026-06-22GCVE DatabaseCVE-2026-44203 A reflected cross-site scripting (XSS) vulnerability exists in the OAuth 2.0 / OpenID Connect authorization endpoint of OpenAM when using the form_post response mode. The vulnerability arises because certain user-supplied parameters are not properly sanitized before being included in the HTML response. This flaw affects OpenAM versions from 13.0.0 up to but not including 16.1.1. A fix is available in version 16.1.1. EPSS 0.6%Report on CVE-2026-44203 Vulnerability CWE-79 #ghsa-fq9h-c788-fx73 #maven	GCVE Database	2026-06-22

Page 1 of 1