Code injection

The Multicast DNS mDNS responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtai...

CVE-2015-1892

IBM Security Access Manager for Web (ISAM for Web) 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 is affected by CVE-2015-1892, a vulnerability in the mDNS responder that may reply to unicast queries from outside the local link. This can lead to information disclosure or a DoS via traffic amplifi...

CVE-2015-1892

The Multicast DNS mDNS responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtai...

NetIQ Access Manager Detect

Binary data netiqaccessmanagerdetect.nbin...

NetIQ Access Manager Detect

Binary data netiqaccessmanagerinstalled.nbin...

NetIQ Access Manager 4.0 < 4.0 SP1 Hotfix 3 Multiple Vulnerabilities

The remote host is running a version of NetIQ Access Manager 4.0 without service pack 1 hotfix 3. It is, therefore, affected by the following vulnerabilities : - An XML Entity Injection XXE flaw exists in the 'query' parameter of the webacc servlet that can allow an authenticated user to view the...

Oracle Access Manager Multiple Vulnerabilities (January 2015 CPU)

The version of Oracle Access Manager installed on the remote host is affected by multiple unspecified vulnerabilities that allow remote attackers to impact integrity and confidentiality. Note that this plugin does not check for additional configuration required to completely mitigate CVE-2015-036...

Oracle Adaptive Access Manager Unspecified Remote Vulnerability (January 2015 CPU)

The remote host has a version of Oracle Adaptive Access Manager installed that is affected by an unspecified remote vulnerability in the OAM Integration subcomponent, which can be exploited by a remote, authenticated user to impact confidentiality and integrity. %NASLMINLEVEL 70300 C Tenable...

Unspecified Vulnerability in Oracle Access Manager SSO Engine Subpart (CNVD-2015-00525)

Oracle Access Manager is security infrastructure software that helps organizations manage secure access to enterprise Web applications within and across the business-to-business B2B value chain. A security vulnerability in the Oracle Access Manager SSO Engine child allows remote attackers to...

Unspecified Vulnerability in Oracle Adaptive Access Manager OAM Integration Subware

Oracle Adaptive Access Manager is the new identity management suite. A security vulnerability in the Oracle Adaptive Access Manager OAM Integration subware allows remote attackers to exploit the vulnerability to compromise system integrity and confidentiality...

Unspecified Vulnerability in Oracle Access Manager Integration with OAM Subcomponent

Oracle Access Manager is security infrastructure software that helps organizations manage secure access to enterprise Web applications within and across business-to-business B2B value chains. A security vulnerability exists in the Oracle Access Manager Integration with OAM child that could be...

CVE-2015-0434

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect confidentiality via vectors related to Integration with OAM...

CVE-2015-0434

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect confidentiality via vectors related to Integration with OAM...

CVE-2015-0434

CVE-2015-0434 describes an unspecified vulnerability in Oracle Access Manager within Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 that can allow remote attackers to affect confidentiality through integration with OAM. The exposure is network-based with medium attack complex...

CVE-2015-0367

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via vectors related to SSO Engine...

CVE-2015-0367

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via vectors related to SSO Engine...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via vectors related to SSO Engine...

CVE-2015-0367

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via vectors related to SSO Engine...

CVE-2015-0367

CVE-2015-0367 concerns an unspecified vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 that could affect integrity via vectors related to the SSO Engine. The connected documents corroborate this CVE in the context of Oracl...

CVE-2014-6576

Unspecified vulnerability in the Oracle Adaptive Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to OAM Integration...