Cpe:2.3:a:forgerock:openam:*:*:*:*:*:*:*:*

OpenAM versions prior to 16.1.3 are vulnerable to unauthenticated arbitrary class instantiation via the legacy JAX-RPC SOAP interface, enabling potential remote code execution.