CVE-2014-6147
- EPSS 0.13%
- Veröffentlicht 19.02.2015 02:59:33
- Zuletzt bearbeitet 12.04.2025 10:46:40
IBM Flex System Manager (FSM) 1.1.x.x, 1.2.0.x, 1.2.1.x, 1.3.0.0, 1.3.1.0, and 1.3.2.0 allows local users to obtain sensitive information, and consequently gain privileges or conduct impersonation attacks, via unspecified vectors.
CVE-2014-0897
- EPSS 0.09%
- Veröffentlicht 29.08.2014 09:55:07
- Zuletzt bearbeitet 12.04.2025 10:46:40
The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module (CMM) account creation, which makes it easier for remote authent...
- EPSS 0.32%
- Veröffentlicht 07.07.2014 11:01:28
- Zuletzt bearbeitet 12.04.2025 10:46:40
IBM Flex System Manager (FSM) 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors.
CVE-2013-5438
- EPSS 0.35%
- Veröffentlicht 14.12.2013 22:55:03
- Zuletzt bearbeitet 11.04.2025 00:51:21
Cross-site scripting (XSS) vulnerability in the web server in IBM Flex System Manager (FSM) 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-5424
- EPSS 0.25%
- Veröffentlicht 25.10.2013 20:55:03
- Zuletzt bearbeitet 11.04.2025 00:51:21
IBM Flex System Manager (FSM) 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account.