Lucene search
+L

790 matches found

CNVD
CNVD
added 2022/01/14 12:0 a.m.32 views

IBM Security Verify Information Disclosure Vulnerability

IBM Security Verify Access is a service from IBM USA that improves user access security. The service enables secure and simple access to platforms such as Web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls, identity...

5CVSS2.7AI score0.00969EPSS
SaveExploits0Affected Software2
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.7 views

IBM Security Verify 加密问题漏洞

IBM Security VerifyAccess ISAM is a service from IBM USA that improves user access security. The service enables secure and simple access to platforms such as Web, mobile, IoT, and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls,...

7.5CVSS5.6AI score0.00665EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.12 views

The vulnerability of the Access Management (AM) and OpenAM software tools, related to deficiencies in data deserialization mechanisms, allows attackers to execute arbitrary code.

The vulnerability of Access Management AM and OpenAM software solutions is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.99999EPSS
SaveExploits8References7Affected Software2
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
added 2021/11/17 11:58 a.m.24 views

Meaning CISO (Chief Information Security Officer) in cybersecurity ️‍♀️

Not many out of each odd association has an undeniable level security expert: According to IDG’s 2020 Security Priorities Research, 61% of researched associations do, but that rate increments by to 80% for tremendous endeavors. However, in associations that use an especially pioneer, they accept ...

7AI score
SaveExploits0
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
added 2021/11/16 6:1 a.m.25 views

What is IAM (Identity and Access Management) ❓

Would you like to leave your locker open, with valuables inside, while you’re leaving town or going to sleep? Of course not, as doing so is a foolish act and is like sending invitations to the buglers. Similarly, one shouldn’t leave its database and information center open for all. This will lead...

8AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2021/11/09 8:0 p.m.19 views

Microsoft is a 5-time Leader in the Gartner Magic Quadrant for Access Management

We are honored that Gartner recognized Microsoft as a Leader in Gartner® Magic QuadrantTM for Access Management in Microsoft Azure Active Directory Azure AD. In addition, Microsoft has placed the farthest right on the “Completeness of Vision” axis. None of this is possible without you, our...

6.8AI score
SaveExploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2021/11/09 8:0 p.m.18 views

Microsoft is a 5-time Leader in the Gartner Magic Quadrant for Access Management

We are honored that Gartner recognized Microsoft as a Leader in Gartner® Magic QuadrantTM for Access Management in Microsoft Azure Active Directory Azure AD. In addition, Microsoft has placed the farthest right on the “Completeness of Vision” axis. None of this is possible without you, our...

6.8AI score
SaveExploits0
Imperva Blog
Imperva Blog
added 2021/11/09 2:29 p.m.25 views

Why you need to rethink your data security strategy and go beyond DLP

The increasing frequency and scale of data breaches has highlighted the need for organizations to rethink their approach to data security. Data Loss Prevention DLP technologies have been around for decades and formed a large part of many organizations’ data protection strategies. However, there i...

7AI score
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.25 views

ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability

ForgeRock Access Management AM Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints /ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame to execute code in the context of the current user unless ForgeRock AM is running as root user, whi...

10CVSS9AI score0.99999EPSS
SaveIn wildExploits8
VulnCheck KEV
VulnCheck KEV
added 2021/11/03 12:0 a.m.7 views

VulnCheck KEV: CVE-2021-35464

ForgeRock Access Management AM Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints /ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame to execute code in the context of the current user unless ForgeRock AM is running as root...

10CVSS7.6AI score0.99999EPSS
SaveExploits8References1
CNVD
CNVD
added 2021/10/19 12:0 a.m.20 views

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2022-10721)

Aruba ClearPass Policy Manager is an application of Aruba, Inc. that provides wireless network security access management system Aruba ClearPass Policy Manager has a security vulnerability that stems from a remote arbitrary command execution vulnerability in Aruba ClearPass Policy Manager version...

7.2CVSS3.8AI score0.01866EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/01 12:0 a.m.7 views

ThycoticCentrify Secret Server SQL注入漏洞

ThycoticCentrify Secret Server is a privileged access management software from Thycotic Corporation. A SQL injection vulnerability exists in ThycoticCentrify Secret Server, which arises from a database-based application that lacks validation of externally entered SQL statements. An attacker can...

6.5CVSS6.9AI score0.0068EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/09/16 12:0 a.m.31 views

IBM Security Secret Server Information Disclosure Vulnerability (CNVD-2022-05089)

IBM Security Secret Server is a privileged access management solution from IBM Corporation. The product supports password management, privileged account identification, and privileged session access monitoring logs.A security vulnerability exists prior to IBM Security Secret Server 11.0, which...

5.3CVSS3.2AI score0.00944EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2021/09/14 10:26 a.m.26 views

Zero Trust Requires Cloud Data Security with Integrated Continuous Endpoint Risk Assessment

Every once in a while, an industry term will get overused by marketing to the point of becoming a cliche. "Zero Trust" may have reached this threshold. In some ways, we understand why this is happening. Security perimeters have become obsolete as people use mobile devices and cloud applications t...

7.3AI score
SaveExploits0
CNNVD
CNNVD
added 2021/09/14 12:0 a.m.8 views

IBM Security Secret Server 安全漏洞

IBM Security Secret Server is a privileged access management solution from IBM Corporation. The product supports password management, privileged account identification, and privileged session access monitoring and logging. security vulnerabilities existed prior to IBM Security Secret Server 11.0,...

4.3CVSS5.8AI score0.00974EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/09/14 12:0 a.m.5 views

IBM Security Secret Server 输入验证错误漏洞

IBM Security Secret Server is a privileged access management solution from IBM Corporation. The product supports password management, privileged account identification, and privileged session access monitoring logs.A security vulnerability exists prior to IBM Security Secret Server 11.0, which...

5.3CVSS5.5AI score0.00944EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/08/27 12:0 a.m.37 views

ForgeRock AM XML Injection Vulnerability

ForgeRock Access Management is a comprehensive, unified solution from ForgeRock USA designed to quickly enable a superior experience tailored to the unique needs of users and employees.ForgeRock Access Management AM prior to 7.0.2 versions contained an XML injection vulnerability that could be...

10CVSS4AI score0.01359EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/08/27 12:0 a.m.35 views

ForgeRock Access Management Licensing Issue Vulnerability

ForgeRock Access Management is a comprehensive, unified solution from ForgeRock USA designed to quickly enable a superior experience tailored to the unique needs of users and employees. versions, an authorization issue vulnerability exists that stems from an authentication bypass issue when...

9.8CVSS3.8AI score0.01194EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/25 9:15 p.m.27 views

CVE-2021-37154

In ForgeRock Access Management AM before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion...

10CVSS0.01359EPSS
SaveExploits0References2
OSV
OSV
added 2021/08/25 9:15 p.m.7 views

CVE-2021-37154

In ForgeRock Access Management AM before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion...

9.8CVSS7.3AI score0.01359EPSS
SaveExploits0References2
Rows per page
Query Builder