CVE-2026-62280 | OpenIdentityPlatform OpenAM up to 16.1.1 OAuth2 Authorize Endpoint wap/authorize.ftl cross site scripting

September 15, 2026 Yanac

A vulnerability was found in OpenIdentityPlatform OpenAM up to 16.1.1. It has been declared as problematic. The affected element is an unknown function of the file wap/authorize.ftl of the component OAuth2 Authorize Endpoint. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-62280. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More