Ibm

Security Access Manager For Web

20 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2017-1480

  • EPSS 0.13%
  • Published 06.06.2018 17:29:00
  • Last modified 21.11.2024 03:21:56

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617.

5.9

CVE-2017-1476

  • EPSS 0.25%
  • Published 06.06.2018 17:29:00
  • Last modified 21.11.2024 03:21:55

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could ex...

5.3

CVE-2017-1474

  • EPSS 0.19%
  • Published 06.06.2018 17:29:00
  • Last modified 21.11.2024 03:21:55

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.

6.1

CVE-2017-1489

  • EPSS 0.21%
  • Published 29.08.2017 01:35:13
  • Last modified 20.04.2025 01:37:25

IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.

4.3

CVE-2016-3045

  • EPSS 0.19%
  • Published 01.02.2017 20:59:00
  • Last modified 20.04.2025 01:37:25

IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history.

6.1

CVE-2016-3018

  • EPSS 0.24%
  • Published 01.02.2017 20:59:00
  • Last modified 20.04.2025 01:37:25

IBM Security Access Manager for Web is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within ...

9.1

CVE-2016-3028

  • EPSS 0.57%
  • Published 25.11.2016 03:59:07
  • Last modified 12.04.2025 10:46:40

IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leveraging LMI admin access.

7.5

CVE-2015-4963

  • EPSS 0.76%
  • Published 08.11.2015 22:59:12
  • Last modified 12.04.2025 10:46:40

IBM Security Access Manager for Web 7.x before 7.0.0.16 and 8.x before 8.0.1.3 mishandles WebSEAL HTTPTransformation requests, which allows remote attackers to read or write to arbitrary files via unspecified vectors.

4

CVE-2014-6089

  • EPSS 0.42%
  • Published 18.12.2014 16:59:10
  • Last modified 12.04.2025 10:46:40

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a denial of service (disrupted system operations) by uploading a file to ...

5

CVE-2014-6088

  • EPSS 0.26%
  • Published 18.12.2014 16:59:09
  • Last modified 12.04.2025 10:46:40

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to obtain sensitive information by sniffing the network during use of the null SSL cipher.