Optimal IdM vulnerabilities
Published CVEs affecting Optimal IdM products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-113384
Medium · 4.3
CWE-601 Oct 20, 2026
Optimal IdM OptimalCloud social redirect
A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of the file /v5.0/social. Executing a manipulation of the argument state can lead to open redirect. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-113383
Medium · 4.3
CWE-79 Oct 20, 2026
Optimal IdM OptimalCloud Login cross site scripting
A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file /v5.0/webapps/pages/public/Login. Performing a manipulation of the argument tz results in cross site scripting. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.