Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-8662
PUBLISHED
More InfoOfficial Page
Assigner-openam-jp
Assigner Org ID-37c6977f-aa3f-41e8-829b-3e8ff4df3c14
View Known Exploited Vulnerability (KEV) details
Published At-02 Sep, 2025 | 02:06
Updated At-03 Sep, 2025 | 14:36
Rejected At-
▼CVE Numbering Authority (CNA)

OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1.

Affected Products
Vendor
OpenAM consortium
Product
OpenAM
Default Status
unknown
Versions
Affected
  • From 14.0.0 through 14.0.1 (semver)
Metrics
VersionBase scoreBase severityVector
4.02.3LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L
Version: 4.0
Base score: 2.3
Base severity: LOW
Vector:
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

The OpenAM Consortium has released OpenAM 14.0.2, which addresses the vulnerability. Please update to the released OpenAM version.

Configurations
Workarounds
Exploits
Credits
finder
Hiromu Miyazaki (OSSTech Corporation)
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://openam-jp.github.io/Advisories/CVE-2025-8662/
N/A
Hyperlink: https://openam-jp.github.io/Advisories/CVE-2025-8662/
Resource: N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Problem Types
TypeCWE IDDescription
CWECWE-20CWE-20 Improper Input Validation
Type: CWE
CWE ID: CWE-20
Description: CWE-20 Improper Input Validation
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found