OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://openam-jp.github.io/Advisories/CVE-2025-8662/ Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 2.3 · openamNVD modified 2026-10-19 17:10
Affected (CPE criteria) 1
cpe:2.3:a:openam:openam:*:*:*:*:consortium:*:*:*
References 1
- https://openam-jp.github.io/Advisories/CVE-2025-8662/ Vendor Advisory