CVE-2017-3553

CVE-2017-3553 affects Oracle Identity Manager within Oracle Fusion Middleware (Rules Engine). Affected product/version: Oracle Identity Manager, 11.1.2.3.0. Root cause/impact: network-accessible, low-privilege attacker can compromise Oracle Identity Manager, with full takeover risk and confidenti...

CVE-2017-3553

Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware subcomponent: Rules Engine. The supported version that is affected is 11.1.2.3.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager...

PT-2017-15987

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager version 11.1.2.3.0 Description The issue affects the Rules Engine subcomponent of Oracle Identity Manager, allowing a low-privileged attacker with network access via HTTP to compromise Oracle Identity Manager. This can...

CVE-2017-3553: Undefined Security Weakness

Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware subcomponent: Rules Engine. The supported version that is affected is 11.1.2.3.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager...

Oracle Identity Manager Remote Vulnerability (CNVD-2017-06024)

Oracle Identity Manager is an enterprise identity management system that automates the management of user access to IT resources within your organization. A remote security vulnerability exists in Oracle Identity Manager, which can be exploited by remote attackers to compromise system...

Oracle Identity Manager Rules Engine Vulnerability (April 2017 CPU)

The remote host is missing the April 2017 Critical Patch Update for Oracle Identity Manager. It is, therefore, affected by an unspecified vulnerability in the Rules Engine subcomponent that allows an authenticated, remote attacker to impact confidentiality, integrity, and availability...

IBM Security Identity Manager Cross-Site Request Forgery Vulnerability (CNVD-2017-04428)

IBMSecurityIdentityManager ISIM is a suite of identity management and governance solutions from IBM, USA. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password management. A cross-si...

CVE-2016-9739

IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a local user...

CVE-2016-9704

IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-9703

IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information...

CVE-2016-9703

IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information...

CVE-2016-9704

IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-9739

IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a local user...

Cross site scripting

IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Design/Logic Flaw

IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a local user...

Information disclosure

IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information...

CVE-2016-9739

IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a local user...

CVE-2016-9704

CVE-2016-9704 affects IBM Security Identity Manager Virtual Appliance. It is a cross-site scripting vulnerability in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Exploitation status is not provided in the supplied d...

CVE-2016-9739

CVE-2016-9739 concerns IBM Security Identity Manager Virtual Appliance where a local user can read stored credentials because they are kept in plaintext. The available connected IBM security bulletin details the affected product family (IGI/IGI-Virtual Appliance) and confirms the underlying issue...

CVE-2016-9704

IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...