Ibm

Security Access Manager

48 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2020-4661

  • EPSS 0.11%
  • Veröffentlicht 12.10.2020 13:15:12
  • Zuletzt bearbeitet 21.11.2024 05:33:03

IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186142.

5.3

CVE-2020-4660

  • EPSS 0.12%
  • Veröffentlicht 12.10.2020 13:15:12
  • Zuletzt bearbeitet 21.11.2024 05:33:03

IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186140.

5.3

CVE-2020-4699

  • EPSS 0.11%
  • Veröffentlicht 12.10.2020 13:15:12
  • Zuletzt bearbeitet 21.11.2024 05:33:08

IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186947.

6.1

CVE-2019-4725

  • EPSS 0.19%
  • Veröffentlicht 06.10.2020 16:15:12
  • Zuletzt bearbeitet 21.11.2024 04:44:03

IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure w...

6.5

CVE-2020-4461

  • EPSS 0.17%
  • Veröffentlicht 20.05.2020 13:15:09
  • Zuletzt bearbeitet 21.11.2024 05:32:45

IBM Security Access Manager Appliance 9.0.7.1 could allow an authenticated user to bypass security by allowing id_token claims manipulation without verification. IBM X-Force ID: 181481.

7.1

CVE-2019-4707

  • EPSS 0.6%
  • Veröffentlicht 28.01.2020 19:15:14
  • Zuletzt bearbeitet 21.11.2024 04:44:02

IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM...

7.5

CVE-2019-4036

  • EPSS 0.53%
  • Veröffentlicht 25.10.2019 17:15:11
  • Zuletzt bearbeitet 21.11.2024 04:43:04

IBM Security Access Manager Appliance could allow unauthenticated attacker to cause a denial of service in the reverse proxy component. IBM X-Force ID: 156159.

4.3

CVE-2019-4150

  • EPSS 0.08%
  • Veröffentlicht 25.06.2019 16:15:10
  • Zuletzt bearbeitet 21.11.2024 04:43:14

IBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-Force ID: 158510.

5.5

CVE-2019-4158

  • EPSS 0.09%
  • Veröffentlicht 25.06.2019 16:15:10
  • Zuletzt bearbeitet 21.11.2024 04:43:15

IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resources or functionality to unintended actors. IBM X-Force ID: 158574.

6.1

CVE-2019-4157

  • EPSS 0.22%
  • Veröffentlicht 25.06.2019 16:15:10
  • Zuletzt bearbeitet 21.11.2024 04:43:15

IBM Security Access Manager 9.0.1 through 9.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclo...