Product:

Security_access_manager_9\.0_firmware

(Ibm)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 25
Date Id Summary Products Score Patch Annotated
2017-02-08 CVE-2015-5013 The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access. Security_access_manager_9\.0_firmware, Security_access_manager_for_mobile, Security_access_manager_for_web_8\.0_firmware 5.5
2017-02-01 CVE-2016-3022 IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorrect file permissions. Security_access_manager_9\.0_firmware, Security_access_manager_for_mobile_8\.0_firmware, Security_access_manager_for_web_7\.0_firmware, Security_access_manager_for_web_8\.0_firmware 6.5
2018-01-10 CVE-2017-1533 IBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130675. Security_access_manager_9\.0_firmware 6.1
2017-11-13 CVE-2017-1477 IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128612. Security_access_manager_9\.0_firmware 8.1
2018-01-10 CVE-2017-1459 IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 128378. Security_access_manager_9\.0_firmware, Security_access_manager_for_mobile, Security_access_manager_for_web_8\.0_firmware 4.2
2017-11-13 CVE-2017-1453 IBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 128372. Security_access_manager_9\.0_firmware 8.8
2017-02-16 CVE-2016-5919 IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM Reference #: 1996868. Security_access_manager_9\.0_firmware, Security_access_manager_for_mobile, Security_access_manager_for_web_7\.0_firmware, Security_access_manager_for_web_8\.0_firmware 7.5
2017-02-01 CVE-2016-3027 IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. Security_access_manager_9\.0_firmware, Security_access_manager_for_mobile_8\.0_firmware, Security_access_manager_for_web_8\.0_firmware 6.5
2017-02-01 CVE-2016-3029 IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Security_access_manager_9\.0_firmware, Security_access_manager_for_mobile_8\.0_firmware, Security_access_manager_for_web_8\.0_firmware 8.8
2017-06-07 CVE-2016-3051 IBM Security Access Manager for Web 9.0.0 could allow an authenticated user to access some privileged functionality of the server. IBM X-Force ID: 114714. Security_access_manager_9\.0_firmware 4.3