Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Tivoli Federated Identity Manager TFIM 6.2.0 before FP17, 6.2.1 before FP9, and 6.2.2 before FP15, as used in Security Access Manager for Mobile and other products, allow remote attackers to inject arbitrary web script or HTML via a crafted...

CVE-2015-1966

CVE-2015-1966 is a cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) and related IBM Security Access Manager for Mobile. It affects TFIM versions 6.2.0 before FP17, 6.2.1 before FP9, and 6.2.2 before FP15, allowing a remote attacker to inject arbitrary scrip...

CVE-2015-1966

Multiple cross-site scripting XSS vulnerabilities in IBM Tivoli Federated Identity Manager TFIM 6.2.0 before FP17, 6.2.1 before FP9, and 6.2.2 before FP15, as used in Security Access Manager for Mobile and other products, allow remote attackers to inject arbitrary web script or HTML via a crafted...

NetIQ Access Manager 4.0 SP1 XXE Injection

Hello list! I'll give you additional information concerning advisory Multiple high risk vulnerabilities in NetIQ Access Manager http://securityvulns.ru/docs31510.html. There are five different vulnerabilities in the advisory. For my attack it's needed to use only one vulnerability, XML External...

Unspecified Vulnerability in Oracle Fusion Middleware Access Manager Component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Authentication Engine subcomponent of the Oracle Access Manager component of Oracle Fusion Middleware, which can be exploited by remote attackers to manipulate...

CVE-2015-0461

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Authentication Engine...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Authentication Engine...

CVE-2015-0461

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Authentication Engine...

CVE-2015-0461

CVE-2015-0461 affects the Oracle Fusion Middleware Oracle Access Manager component, specifically the Authentication Engine subcomponent, in versions 11.1.1.5 and 11.1.1.7. The vulnerability is described as unspecified, enabling remote authenticated users to affect confidentiality and integrity vi...

CVE-2015-1892

The Multicast DNS mDNS responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtai...

Code injection

The Multicast DNS mDNS responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtai...

CVE-2015-1892

IBM Security Access Manager for Web (ISAM for Web) 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 is affected by CVE-2015-1892, a vulnerability in the mDNS responder that may reply to unicast queries from outside the local link. This can lead to information disclosure or a DoS via traffic amplifi...

CVE-2015-1892

The Multicast DNS mDNS responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtai...

NetIQ Access Manager Detect

Binary data netiqaccessmanagerdetect.nbin...

NetIQ Access Manager Detect

Binary data netiqaccessmanagerinstalled.nbin...

NetIQ Access Manager 4.0 < 4.0 SP1 Hotfix 3 Multiple Vulnerabilities

The remote host is running a version of NetIQ Access Manager 4.0 without service pack 1 hotfix 3. It is, therefore, affected by the following vulnerabilities : - An XML Entity Injection XXE flaw exists in the 'query' parameter of the webacc servlet that can allow an authenticated user to view the...

Oracle Access Manager Multiple Vulnerabilities (January 2015 CPU)

The version of Oracle Access Manager installed on the remote host is affected by multiple unspecified vulnerabilities that allow remote attackers to impact integrity and confidentiality. Note that this plugin does not check for additional configuration required to completely mitigate CVE-2015-036...

Oracle Adaptive Access Manager Unspecified Remote Vulnerability (January 2015 CPU)

The remote host has a version of Oracle Adaptive Access Manager installed that is affected by an unspecified remote vulnerability in the OAM Integration subcomponent, which can be exploited by a remote, authenticated user to impact confidentiality and integrity. %NASLMINLEVEL 70300 C Tenable...

Unspecified Vulnerability in Oracle Access Manager SSO Engine Subpart (CNVD-2015-00525)

Oracle Access Manager is security infrastructure software that helps organizations manage secure access to enterprise Web applications within and across the business-to-business B2B value chain. A security vulnerability in the Oracle Access Manager SSO Engine child allows remote attackers to...

Unspecified Vulnerability in Oracle Adaptive Access Manager OAM Integration Subware

Oracle Adaptive Access Manager is the new identity management suite. A security vulnerability in the Oracle Adaptive Access Manager OAM Integration subware allows remote attackers to exploit the vulnerability to compromise system integrity and confidentiality...