Ibm

Security Access Manager For Mobile

26 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4

CVE-2016-3046

  • EPSS 0.12%
  • Published 01.02.2017 20:59:00
  • Last modified 20.04.2025 01:37:25

IBM Security Access Manager for Web is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements which could allow the attacker to view information in the back-end database.

4.3

CVE-2016-3045

  • EPSS 0.19%
  • Published 01.02.2017 20:59:00
  • Last modified 20.04.2025 01:37:25

IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history.

5.9

CVE-2016-3043

  • EPSS 0.21%
  • Published 01.02.2017 20:59:00
  • Last modified 20.04.2025 01:37:25

IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information u...

8.1

CVE-2016-3025

  • EPSS 0.54%
  • Published 25.11.2016 03:59:06
  • Last modified 12.04.2025 10:46:40

IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.

4

CVE-2014-6089

  • EPSS 0.42%
  • Published 18.12.2014 16:59:10
  • Last modified 12.04.2025 10:46:40

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a denial of service (disrupted system operations) by uploading a file to ...

5

CVE-2014-6088

  • EPSS 0.26%
  • Published 18.12.2014 16:59:09
  • Last modified 12.04.2025 10:46:40

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to obtain sensitive information by sniffing the network during use of the null SSL cipher.

5

CVE-2014-6087

  • EPSS 0.26%
  • Published 18.12.2014 16:59:08
  • Last modified 12.04.2025 10:46:40

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 make it easier for remote attackers to obtain sensitive information by sniffing the network during use of a weak al...

5

CVE-2014-6086

  • EPSS 0.26%
  • Published 18.12.2014 16:59:07
  • Last modified 12.04.2025 10:46:40

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not ensure that HTTPS is used, which allows remote attackers to obtain sensitive information by sniffing the net...

5

CVE-2014-6084

  • EPSS 0.26%
  • Published 18.12.2014 16:59:06
  • Last modified 12.04.2025 10:46:40

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 make it easier for remote attackers to obtain sensitive information by sniffing the network during use of a weak SS...

5

CVE-2014-6083

  • EPSS 0.26%
  • Published 18.12.2014 16:59:05
  • Last modified 12.04.2025 10:46:40

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session.