Lucene search
+L

2335 matches found

CNVD
CNVD
added 2016/07/12 12:00 a.m.7 views

IBM Security Identity Manager User Forgery Vulnerability

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

5.6CVSS9.2AI score0.01294EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/07/12 12:00 a.m.10 views

IBM Security Identity Manager Privilege Gain Vulnerability

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

7.3CVSS9.6AI score0.01225EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/07/05 12:00 a.m.6 views

IBM Security Privileged Identity Manager Virtual Appliance Arbitrary File Modification Vulnerability

IBM Security Privileged Identity Manager is an identity management product within IBM Identity Governance and Management, an identity governance solution from IBM USA, that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security...

6.5CVSS6.8AI score0.00875EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/07/05 12:00 a.m.8 views

IBM Security Privileged Identity Manager Virtual Appliance Sensitive Information Access Vulnerability

IBM Security Privileged Identity Manager is an identity management product within IBM Identity Governance and Management, an identity governance solution from IBM USA, that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security...

4.3CVSS6.4AI score0.00641EPSS
SaveExploits0References1
Symantec
Symantec
added 2016/06/07 12:00 a.m.49 views

Apache Struts CVE-2016-1181 Remote Code Execution Vulnerability

Description Apache Struts is prone to a remote code-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts may cause a denial-of-service condition. Apache Struts 1.0 through...

6.8CVSS1AI score0.13122EPSS
SaveExploits0References1Affected Software28
CNVD
CNVD
added 2016/05/06 12:00 a.m.8 views

IBM Security Identity Manager Virtual Appliance Arbitrary Command Execution Vulnerability

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

9CVSS7.7AI score0.03677EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/05/06 12:00 a.m.7 views

IBM Security Identity Manager Virtual Appliance Brute Force Vulnerability

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

9.8CVSS6.8AI score0.02286EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/04/24 12:00 a.m.8 views

IBM Security Privileged Identity Manager Clickjacking Vulnerability

IBM Security Privileged Identity Manager is an identity management product within an identity supervision solution. A clickjacking vulnerability exists in IBM Security Privileged Identity Manager, which allows an attacker to construct a malicious URI, trick users into parsing it, and redirect the...

4.3CVSS9.3AI score0.01348EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2016/01/22 12:00 a.m.27 views

IBM Tivoli Federated Identity Manager 6.2.2 < 6.2.2 FP16 XSS (swg21974157)

The version of IBM Tivoli Federated Identity Manager installed on the remote Windows host is 6.2.2.x prior to 6.2.2.16. It is, therefore, affected by a cross-site scripting vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a...

6.1CVSS6.2AI score0.01417EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2016/01/18 5:59 a.m.0 views

CVE-2015-4959

Cross-site scripting XSS vulnerability in IBM Tivoli Federated Identity Manager TFIM 6.2.2 before FP16 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

6.1CVSS5.7AI score0.01417EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2015/11/05 12:00 a.m.9 views

The vulnerability of the Oracle Fusion Middleware software allows a perpetrator to modify data.

The vulnerability of the Oracle Identity Manager component of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability could allow a malicious actor to remotely modify data...

4.3CVSS7.2AI score0.01451EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2015/10/22 12:00 a.m.8 views

Vulnerability in Oracle Fusion Middleware Identity Manager Component

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other functionality.Oracle Identity Manager is one of the enterprise identity management system...

4.3CVSS6.7AI score0.01451EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/10/22 12:00 a.m.37 views

Oracle Identity Manager OIM Legacy UI Unspecified Vulnerability (October 2015 CPU)

The remote host is missing the October 2015 Critical Patch Update for Oracle Identity Manager. It is, therefore, affected by an unspecified vulnerability due to an unspecified flaw in the OIM Legacy UI subcomponent. A remote attacker can exploit this flaw to impact integrity. %NASLMINLEVEL 70300 ...

4.3CVSS7.5AI score0.01451EPSS
SaveExploits0References2
Prion
Prion
added 2015/10/21 9:59 p.m.18 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.2, and 11.1.2.3 allows remote attackers to affect integrity via vectors related to OIM Legacy UI...

4.3CVSS6.3AI score0.01451EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2015/10/21 9:00 p.m.32 views

CVE-2015-4832

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.2, and 11.1.2.3 allows remote attackers to affect integrity via vectors related to OIM Legacy UI...

5.7AI score0.01451EPSS
SaveExploits0References2
CVE
CVE
added 2015/10/21 9:00 p.m.67 views

CVE-2015-4832

CVE-2015-4832 describes an unspecified vulnerability in the Oracle Identity Manager (OIM) component of Oracle Fusion Middleware, specifically in the OIM Legacy UI subcomponent. The affected software versions are Oracle Fusion Middleware 11.1.1.7, 11.1.2.2, and 11.1.2.3. The vulnerability is state...

4.3CVSS5.9AI score0.01451EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/10/08 12:00 a.m.23 views

IBM Tivoli Federated Identity Manager Unspecified XSS

The version of IBM Tivoli Federated Identity Manager installed on the remote Windows host is affected by an unspecified cross-site scripting XSS vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a crafted URL, to arbitrary...

4.3CVSS5.8AI score0.01965EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2015/10/08 12:00 a.m.14 views

IBM Tivoli Federated Identity Manager Installation Detection

Binary data tivolifederatedidentitymanagerinstalled.nbin...

7.3AI score
SaveExploits0References1
CNVD
CNVD
added 2015/07/08 12:00 a.m.28 views

IBM Tivoli Federated Identity Manager and Security Access Manager for Mobile Cross-Site Scripting Vulnerability

IBM Tivoli Federated Identity Manager TFIM and Security Access Manager for Mobile are both products of IBM USA. The former is a cross-enterprise federated identity management product. The latter is a solution that provides mobile access security through a modular software package. A cross-site...

4.3CVSS5.9AI score0.01965EPSS
SaveExploits0References1
NVD
NVD
added 2015/07/04 2:59 p.m.21 views

CVE-2015-1966

Multiple cross-site scripting XSS vulnerabilities in IBM Tivoli Federated Identity Manager TFIM 6.2.0 before FP17, 6.2.1 before FP9, and 6.2.2 before FP15, as used in Security Access Manager for Mobile and other products, allow remote attackers to inject arbitrary web script or HTML via a crafted...

4.3CVSS5.6AI score0.01965EPSS
SaveExploits0References6
Rows per page
Query Builder