Lucene search
+L

38 matches found

CNVD
CNVD
added 2022/07/11 12:0 a.m.57 views

IBM Security Verify Access Cross-Site Scripting Vulnerability (CNVD-2022-87651)

IBM Security Verify Access ISAM is a service from IBM USA that improves user access security. The service enables secure and simple access to platforms such as Web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls,...

5.4CVSS2AI score0.00438EPSS
SaveExploits0References1
OSV
OSV
added 2022/05/17 4:9 a.m.12 views

GHSA-9QHQ-J4XM-CW48 PicketLink does not properly check role based authorization

The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.7.1.Final does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a 1 direct request or 2...

4CVSS6.1AI score0.01913EPSS
SaveExploits0References11
Github Security Blog
Github Security Blog
added 2022/05/17 4:9 a.m.15 views

PicketLink does not properly check role based authorization

The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.7.1.Final does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a 1 direct request or 2...

4CVSS7AI score0.01913EPSS
SaveExploits0References11Affected Software1
CNVD
CNVD
added 2022/01/14 12:0 a.m.52 views

IBM Security Verify encryption issue vulnerability

IBM Security VerifyAccess ISAM is a service from IBM USA that improves user access security. The service enables secure and simple access to platforms such as Web, mobile, IoT, and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls,...

7.5CVSS2.3AI score0.00665EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/01/14 12:0 a.m.31 views

IBM Security Verify Information Disclosure Vulnerability (CNVD-2022-08045)

IBM Security Verify Access is a service from IBM USA that improves user access security. The service enables secure and simple access to platforms such as Web, mobile, IoT, and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls, identity...

4CVSS2.5AI score0.00935EPSS
SaveExploits0Affected Software2
CNVD
CNVD
added 2022/01/14 12:0 a.m.31 views

IBM Security Verify Information Disclosure Vulnerability

IBM Security Verify Access is a service from IBM USA that improves user access security. The service enables secure and simple access to platforms such as Web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls, identity...

5CVSS2.7AI score0.00969EPSS
SaveExploits0Affected Software2
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.7 views

IBM Security Verify 加密问题漏洞

IBM Security VerifyAccess ISAM is a service from IBM USA that improves user access security. The service enables secure and simple access to platforms such as Web, mobile, IoT, and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls,...

7.5CVSS5.6AI score0.00665EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/06/02 12:0 a.m.9 views

IBM Security Verify Access Buffer Overflow Vulnerability

IBM Security Verify Access is a service that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies by using risk-based access, single sign-on, integrated access management controls, identity federation and mobile...

9CVSS7.9AI score0.0112EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/01/23 12:0 a.m.7 views

Unspecified vulnerability in Oracle Fusion Middleware Oracle Identity Federation protocol support component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Oracle Identity Federation protocol support component, which could be exploited by remote attackers to modify data...

4CVSS6.8AI score0.0123EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/01/23 12:0 a.m.7 views

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Identity Federation Admin Component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Oracle Identity Federation Admin component, which could be exploited by remote attackers to modify data...

4.3CVSS6.8AI score0.01451EPSS
SaveExploits0References1
NVD
NVD
added 2016/01/21 2:59 a.m.22 views

CVE-2016-0413

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect integrity via vectors related to Federation protocol support...

4CVSS5.3AI score0.0123EPSS
SaveExploits0References2
OSV
OSV
added 2016/01/21 2:59 a.m.3 views

CVE-2016-0413

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect integrity via vectors related to Federation protocol support...

5.8AI score0.0123EPSS
SaveExploits0References2
OSV
OSV
added 2016/01/21 2:59 a.m.3 views

CVE-2016-0404

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.2.2 allows remote attackers to affect integrity via vectors related to Admin...

5.8AI score0.01451EPSS
SaveExploits0References2
Prion
Prion
added 2016/01/21 2:59 a.m.19 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect integrity via vectors related to Federation protocol support...

4CVSS5.7AI score0.0123EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2016/01/21 2:59 a.m.18 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.2.2 allows remote attackers to affect integrity via vectors related to Admin...

4.3CVSS6.3AI score0.01451EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2016/01/21 2:0 a.m.51 views

CVE-2016-0413

CVE-2016-0413 affects Oracle Fusion Middleware, specifically the Oracle Identity Federation component in version 11.1.1.7. The connected documents describe an unspecified vulnerability that allows remote authenticated users to affect data integrity via vectors related to Federation protocol suppo...

4CVSS6.1AI score0.0123EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2016/01/21 2:0 a.m.28 views

CVE-2016-0413

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect integrity via vectors related to Federation protocol support...

5.3AI score0.0123EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2016/01/21 2:0 a.m.25 views

CVE-2016-0404

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.2.2 allows remote attackers to affect integrity via vectors related to Admin...

5.8AI score0.01451EPSS
SaveExploits0References2
Rows per page
Query Builder