CVE-2022-31735: Osstech Openam

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server through some specially crafted URL, the user may be redirected to an arbitrary website.

Affected products

• Osstech Openam: from 13.0.0, up to and including 13.0.0-183; from 14.0.0, up to and including 14.2.0-2

Published 2022-09-15. Last modified 2026-06-17.