What’s Vulnerable › Products

OpenIdentityPlatform OpenDJ vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your OpenIdentityPlatform OpenDJ version is affected

Latest OpenIdentityPlatform OpenDJ vulnerabilities

• CVE-2026-46495 — OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI (CVSS 9.2)
• CVE-2026-73644 — OpenDJ: Authorization bypass in SASL PLAIN allowing a `proxied-auth` holder to impersonate any resolvable non-root user without an ACI proxy grant (CVSS 9.6)
• CVE-2025-27497 — OpenDJ Denial of Service (Dos) using alias loop (CVSS 8.7)