agentprime: openidentityplatform-openamEvery new CVE for openidentityplatform-openam.https://agentprime.io/CVE-2026-105122: OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_urihttps://agentprime.io/advisories/CVE-2026-105122/https://agentprime.io/advisories/CVE-2026-105122/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 12:14:45 GMTCVECVE-2026-105121: OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scopinghttps://agentprime.io/advisories/CVE-2026-105121/https://agentprime.io/advisories/CVE-2026-105121/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 12:14:44 GMTCVECVE-2026-105120: OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpointhttps://agentprime.io/advisories/CVE-2026-105120/https://agentprime.io/advisories/CVE-2026-105120/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 12:14:44 GMTCVECVE-2026-105119: OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flowshttps://agentprime.io/advisories/CVE-2026-105119/https://agentprime.io/advisories/CVE-2026-105119/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 12:14:43 GMTCVECVE-2026-105118: OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSessionhttps://agentprime.io/advisories/CVE-2026-105118/https://agentprime.io/advisories/CVE-2026-105118/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 12:14:43 GMTCVECVE-2026-105117: OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actionshttps://agentprime.io/advisories/CVE-2026-105117/https://agentprime.io/advisories/CVE-2026-105117/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 12:14:42 GMTCVECVE-2026-105116: OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Pagehttps://agentprime.io/advisories/CVE-2026-105116/https://agentprime.io/advisories/CVE-2026-105116/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 12:14:41 GMTCVECVE-2026-105115: OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interfacehttps://agentprime.io/advisories/CVE-2026-105115/https://agentprime.io/advisories/CVE-2026-105115/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 12:14:40 GMTCVECVE-2026-105114: OpenAM before 16.1.3 Reflected XSS via OAuth2 Authorization Error Pagehttps://agentprime.io/advisories/CVE-2026-105114/https://agentprime.io/advisories/CVE-2026-105114/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 12:14:39 GMTCVE