CVE-2020-13420: Openiam

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script.

Affected products

• Openiam Openiam: from 4.1.0, before 4.2.0.3 (fixed in 4.2.0.3)

Published 2021-04-06. Last modified 2026-06-17.