CVE-2014-6487

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service...

CVE-2014-3097

Open redirect vulnerability in IBM Tivoli Federated Identity Manager TFIM 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified...

Open redirect

Open redirect vulnerability in IBM Tivoli Federated Identity Manager TFIM 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified...

Authentication flaw

EMC RSA Identity Management and Governance IMG 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager aka NovellIM is used, allows remote attackers to bypass authentication via an arbitrary valid username...

CVE-2014-4619

RSA IMG (EMC RSA Identity Management and Governance) 6.5.x and 6.8.x are affected when Novell Identity Manager is used, enabling authentication bypass with a valid username. Root cause: authentication bypass due to NovellIM-based setup; no password required for legitimate users. Affected versions...

Sun Java System Identity Manager 6.0/7.0/7.1 /idm/help/index.jsp helpUrl Variable Remote Frame Injection

No description provided by source. source: http://www.securityfocus.com/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting issues, because it fails to adequately sanitize user-supplied...

IBM Tivoli Identity Manager 5.0.5 User Profile HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36293/info IBM Tivoli Identity Manager is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied...

Sun Java System Identity Manager 6.0/7.x Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/32262/info Sun Java System Identity Manager is prone to multiple web-interface vulnerabilities, including a cross-site request-forgery issue, multiple cross-site scripting issues, multiple HTML-injection issues, and a...

Oracle Identity Manager 11g R2 SP1 (11.1.2.1.0) - Unvalidated Redirects

No description provided by source. Unvalidated Redirects on Oracle Identity Manager ======================================================================= ADVISORY INFORMATION Title: Unvalidated Redirects on Oracle Identity Manager Discovery date: 10/12/2013 Release date: 03/04/2014 Vendor...

Sun Java System Identity Manager 6.0/7.0/7.1 /idm/account/findForSelect.jsp resultsForm Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting issues, because it fails to adequately sanitize user-supplied...

Sun Java System Identity Manager 6.0/7.0/7.1 /idm/user/main.jsp activeControl Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting issues, because it fails to adequately sanitize user-supplied...

Novell Identity Manager Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19688/info Novell Identity Manager is prone to an arbitrary command-execution vulnerability. A local attacker can exploit this issue to execute arbitrary commands with superuser privileges. Exploiting this issue allows...

CVE-2014-4509

The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager aka IDM 4.0.2 allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert shell metacharacters...

Design/Logic Flaw

The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager aka IDM 4.0.2 allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert shell metacharacters...

CVE-2014-4509

The CVE-2014-4509 issue affects Novell Identity Manager (IDM) 4.0.2, specifically the MKDQUOTESAFE function in the Fan-out driver scripts within Fan-Out Platform Services. The vulnerability allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert...

CVE-2014-4509

The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager aka IDM 4.0.2 allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert shell metacharacters...

CVE-2014-0961

Cross-site request forgery CSRF vulnerability in IBM Tivoli Identity Manager ITIM 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Security Identity Manager ISIM 6.0 before 6.0.0.2 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM Tivoli Identity Manager ITIM 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Security Identity Manager ISIM 6.0 before 6.0.0.2 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS...

CVE-2014-0961

Cross-site request forgery CSRF vulnerability in IBM Tivoli Identity Manager ITIM 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Security Identity Manager ISIM 6.0 before 6.0.0.2 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS...

CVE-2014-0961

CVE-2014-0961 affects IBM Tivoli Identity Manager (ITIM) 5.0 (before 5.0.0.15), ITIM 5.1 (before 5.1.0.15), and IBM Security Identity Manager (ISIM) 6.0 (before 6.0.0.2). The root issue is a Cross-Site Request Forgery (CSRF) vulnerability that enables remote authenticated users to hijack the auth...