PatchTheCVE: openiamhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-13422: OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrathttps://patchthecve.com/cve/CVE-2020-13422.htmlhttps://patchthecve.com/cve/CVE-2020-13422.htmlWed, 17 Jun 2026 02:53:06 +0000HIGH 8.1: OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions.CVE-2020-13421: OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Passwordhttps://patchthecve.com/cve/CVE-2020-13421.htmlhttps://patchthecve.com/cve/CVE-2020-13421.htmlWed, 17 Jun 2026 02:53:06 +0000CRITICAL 9.8: OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions.CVE-2020-13420: OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script.https://patchthecve.com/cve/CVE-2020-13420.htmlhttps://patchthecve.com/cve/CVE-2020-13420.htmlWed, 17 Jun 2026 02:53:06 +0000CRITICAL 9.8: OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script.CVE-2020-13419: OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task.https://patchthecve.com/cve/CVE-2020-13419.htmlhttps://patchthecve.com/cve/CVE-2020-13419.htmlWed, 17 Jun 2026 02:53:06 +0000MEDIUM 5.3: OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task.CVE-2020-13418: OpenIAM before 4.2.0.3 allows XSS in the Add New User feature.https://patchthecve.com/cve/CVE-2020-13418.htmlhttps://patchthecve.com/cve/CVE-2020-13418.htmlWed, 17 Jun 2026 02:53:06 +0000MEDIUM 6.1: OpenIAM before 4.2.0.3 allows XSS in the Add New User feature.