Ibm

Tivoli Federated Identity Manager Business Gateway

10 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.8

CVE-2013-5431

  • EPSS 0.51%
  • Published 01.11.2013 02:55:04
  • Last modified 11.04.2025 00:51:21

Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1 before IF 15, 6.2.0 before IF 14, 6...

4.3

CVE-2013-0582

  • EPSS 0.26%
  • Published 02.05.2013 18:55:05
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.12, 6.2.1 before 6.2.1.5, and 6.2.2 before 6.2.2.4 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.12 and 6...

4.3

CVE-2012-6359

  • EPSS 0.52%
  • Published 18.01.2013 21:55:00
  • Last modified 11.04.2025 00:51:21

IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.11, 6.2.1 before 6.2.1.3, and 6.2.2 before 6.2.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.11, 6.2.1 before 6.2.1.3, and 6.2.2 before 6.2.2.2 d...

5

CVE-2012-3315

  • EPSS 0.41%
  • Published 08.11.2012 11:46:23
  • Last modified 11.04.2025 00:51:21

The Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM) through 6.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) before 6.2.2 do not require authentication for all resource downloads, which all...

5.8

CVE-2012-3314

  • EPSS 0.18%
  • Published 02.10.2012 21:55:01
  • Last modified 11.04.2025 00:51:21

IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, 6.2.1, and 6.2.2 allow remote attackers to establish sessions via a crafted message that leverages (1) a signature-validation b...

4.3

CVE-2011-1386

  • EPSS 0.19%
  • Published 04.01.2012 03:55:09
  • Last modified 11.04.2025 00:51:21

IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not properly handle signature validations based on SAML 1.0, 1.1, and 2.0, which allows remote attackers to bypass...

10

CVE-2011-3135

  • EPSS 0.53%
  • Published 12.08.2011 17:55:01
  • Last modified 11.04.2025 00:51:21

Unspecified vulnerability in the Runtime in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors.

10

CVE-2011-3136

  • EPSS 0.48%
  • Published 12.08.2011 17:55:01
  • Last modified 11.04.2025 00:51:21

Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors, aka A...

10

CVE-2011-3137

  • EPSS 1.33%
  • Published 12.08.2011 17:55:01
  • Last modified 11.04.2025 00:51:21

Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors, aka A...

5

CVE-2011-3138

  • EPSS 0.23%
  • Published 12.08.2011 17:55:01
  • Last modified 11.04.2025 00:51:21

The LTPA STS module support implementation in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 relies on a static instance of a Java Development Kit...