Vulnerabilities

TI-2017-01199 CVE-2017-1489 · GHSA-cvfh-x2qq-hw4q

Open redirect in IBM Security Access Manager for Web

LOW 30

IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01182 Published 2017-08-28 No fix listed CWE-601

TI-2014-05012 CVE-2014-6079 · GHSA-vrrh-4jx6-f5j5

Cross-site scripting (XSS) vulnerability in the Local Management Interface in IBM…

LOW 23

Cross-site scripting (XSS) vulnerability in the Local Management Interface in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobil…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01357 Published 2014-10-03 No fix listed CWE-79

TI-2014-03963 CVE-2014-4823 · GHSA-hp3h-5542-vq2g

The administration console in IBM Security Access Manager for Web 7.x before…

MEDIUM 48

The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-FP0005, allows remot…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02791 Published 2014-10-03 No fix listed CWE-78

TI-2014-03949 CVE-2014-4809 · GHSA-72qr-f4wf-pgvp

The WebSEAL component in IBM Security Access Manager for Web 7.x before…

LOW 34

The WebSEAL component in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, when e-community SSO is enabled, allows remote attackers to cause a denial of service (com…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.01548 Published 2014-10-03 No fix listed

TI-2014-02454 CVE-2014-3073 · GHSA-4hjp-mx79-3wq5

Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM…

MEDIUM 50

Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to execute arbitrary code via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04219 Published 2014-06-21 No fix listed

TI-2014-02435 CVE-2014-3053 · GHSA-xqhf-qrgr-g45h

The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0…

LOW 38

The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allo…

CVSS 2.0HIGH 8.0 Adjacent network No auth Interaction — EPSS 0.01372 Published 2014-06-21 No fix listed CWE-287

TI-2014-02434 CVE-2014-3052 · GHSA-w55w-gm2f-2hg5

The reverse-proxy feature in IBM Security Access Manager (ISAM) for Web 8.0 with firmware…

LOW 16

The reverse-proxy feature in IBM Security Access Manager (ISAM) for Web 8.0 with firmware 8.0.0.2 and 8.0.0.3 interprets the jct-nist-compliance parameter in the opposite of the intended manner, which makes it easier for…

CVSS 2.0LOW 3.3 Adjacent network No auth Interaction — EPSS 0.00363 Published 2014-06-21 No fix listed CWE-16

TI-2014-00884 CVE-2014-0963 · GHSA-jw2q-j6rf-r9j2

The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access…

LOW 37

The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a deni…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.03077 Published 2014-05-08 No fix listed CWE-399

Vulnerabilities

Filters