VULNRABLE / Vulnerability / CVE-2026-62280
CVE-2026-62280
MEDIUM LOW org.openidentityplatform.openam:openam-oauth2 GHSA
Exploit verdict: No active-exploit signal
CVSS Score
5.5
Severity
MEDIUM
EPSS
—
Source
GHSA
Summary
OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page
What this means
CVE-2026-62280 is a medium-severity vulnerability affecting org.openidentityplatform.openam:openam-oauth2, rated CVSS 5.5. Published July 25, 2026.
View full advisory at GHSA →