Cross site scripting

Cross-site scripting XSS vulnerability in IBM Security Access Manager for Mobile 8.0.0.0, 8.0.0.1, and 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-4751

Cross-site scripting XSS vulnerability in IBM Security Access Manager for Mobile 8.0.0.0, 8.0.0.1, and 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-4751

IBM Security Access Manager for Mobile versions 8.0.0.0, 8.0.0.1, and 8.0.0.3 are affected by CVE-2014-4751 (XSS). The vulnerability enables remote attackers to inject arbitrary web script or HTML via a crafted URL. Exploitation details are not provided in the connected documents beyond this desc...

PT-2014-6096

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager for Mobile versions 8.0.0.0 through 8.0.0.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This can lead to the execution of malicious...

CVE-2014-4751: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Security Access Manager for Mobile 8.0.0.0, 8.0.0.1, and 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

IBM WebSphere Application Server 8.0 < Fix Pack 9 Multiple Vulnerabilities

IBM WebSphere Application Server 8.0 prior to Fix Pack 9 is running on the remote host. It is, therefore, affected by the following vulnerabilities : - A cross-site scripting flaw exists within the Administration Console, where user input is improperly validated. This could allow a remote attacke...

Sun Java System Access Manager <= 7.1 Username Enumeration Weakness

No description provided by source...

IBM Tivoli Access Manager Plugin Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16494/info Tivoli Access Manager Plugin for Web Servers is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit...

Novell Access Manager 3 Identity Server IssueInstant Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21921/info Access Manager Identity Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scri...

FTP Internet Access Manager <= 1.2 Command Execution Exploit

No description provided by source. !usr/bin/perl FTP Internet Access Manager Command Exploit ---------------------------------------------- Infam0us Gr0up - Securiti Research Info: infamous.2hell.com Vendor URL: www.softfolder.com/internetaccessmanager.html use IO::Socket; if @ARGV != 4 print \n...

Intel Corporation Shiva Access Manager 5.0 Solaris World Readable LDAP Password

No description provided by source. source: http://www.securityfocus.com/bid/1329/info The Shiva Access Manager is a solution for centralized remote access authentication, authorization, and accounting offered by Intel. It runs on Solaris and Windows NT. Shiva Access Manager is vulnerable to a...

CVE-2014-3052

The reverse-proxy feature in IBM Security Access Manager ISAM for Web 8.0 with firmware 8.0.0.2 and 8.0.0.3 interprets the jct-nist-compliance parameter in the opposite of the intended manner, which makes it easier for remote attackers to obtain sensitive information by leveraging weak SSL...

CVE-2014-3053

The Local Management Interface LMI in IBM Security Access Manager ISAM for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid...

CVE-2014-3073

Unspecified vulnerability in IBM Security Access Manager ISAM for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to execute arbitrary code via unknown vectors...

Design/Logic Flaw

The reverse-proxy feature in IBM Security Access Manager ISAM for Web 8.0 with firmware 8.0.0.2 and 8.0.0.3 interprets the jct-nist-compliance parameter in the opposite of the intended manner, which makes it easier for remote attackers to obtain sensitive information by leveraging weak SSL...

Code injection

Unspecified vulnerability in IBM Security Access Manager ISAM for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-3053

The Local Management Interface LMI in IBM Security Access Manager ISAM for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid...

CVE-2014-3073

Unspecified vulnerability in IBM Security Access Manager ISAM for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-3052

The reverse-proxy feature in IBM Security Access Manager ISAM for Web 8.0 with firmware 8.0.0.2 and 8.0.0.3 interprets the jct-nist-compliance parameter in the opposite of the intended manner, which makes it easier for remote attackers to obtain sensitive information by leveraging weak SSL...

CVE-2014-3052

The vulnerability CVE-2014-3052 affects IBM Security Access Manager for Web (ISAM) v8.0, firmware 8.0.0.2 and 8.0.0.3. A defect in the reverse-proxy configuration causes the jct-nist-compliance setting to be interpreted in the opposite way, so SSL connections to backends may not enforce NIST SP 8...