https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T08:47:33.157729+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-102303 EUVD-2026-102303 2026-10-15T08:47:33.160962+00:00 EUVD-2026-102303 https://cve.radiocsirt.org/vuln/fkie_cve-2014-7246 fkie_cve-2014-7246 2026-10-15T08:47:33.160993+00:00

The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 through 10.0.2, 10.1.0-Xpress, and 11.0.0 through 11.0.2, when deployed on a multi-server network, allows remote authenticated users to cause a denial of service (infinite loop) via a crafted cookie in a request.

 https://cve.radiocsirt.org/vuln/ghsa-xg23-v3j3-p2h3 GHSA-xg23-v3j3-p2h3 2026-10-15T08:47:33.161023+00:00

The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 through 10.0.2, 10.1.0-Xpress, and 11.0.0 through 11.0.2, when deployed on a multi-server network, allows remote authenticated users to cause a denial of service (infinite loop) via a crafted cookie in a request.

 https://cve.radiocsirt.org/vuln/gsd-2014-7246 gsd-2014-7246 2026-10-15T08:47:33.161041+00:00 gsd-2014-7246 https://cve.radiocsirt.org/vuln/jvndb-2014-000129 jvndb-2014-000129 2026-10-15T08:47:33.161052+00:00

OpenAM provided by ForgeRock is an open source access management software. OpenAM contains a denial-of-service (DoS) vulnerability due to a flaw in processing Cookies (CWE-400). Yasushi IWAKATA of Open Source Solution Technology Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.