Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Security_access_manager_9\.0_firmware
(Ibm)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 25 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2017-02-08 | CVE-2015-5013 | The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access. | Security_access_manager_9\.0_firmware, Security_access_manager_for_mobile, Security_access_manager_for_web_8\.0_firmware | 5.5 | ||
| 2017-02-01 | CVE-2016-3022 | IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorrect file permissions. | Security_access_manager_9\.0_firmware, Security_access_manager_for_mobile_8\.0_firmware, Security_access_manager_for_web_7\.0_firmware, Security_access_manager_for_web_8\.0_firmware | 6.5 | ||
| 2018-01-10 | CVE-2017-1533 | IBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130675. | Security_access_manager_9\.0_firmware | 6.1 | ||
| 2017-11-13 | CVE-2017-1477 | IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128612. | Security_access_manager_9\.0_firmware | 8.1 | ||
| 2018-01-10 | CVE-2017-1459 | IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 128378. | Security_access_manager_9\.0_firmware, Security_access_manager_for_mobile, Security_access_manager_for_web_8\.0_firmware | 4.2 |