3022 matches found
CVE-2023-30999 IBM Security Access Manager denial of service
IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow an attacker to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 254651...
CVE-2023-30999
CVE-2023-30999 affects IBM Security Verify Access: Docker 10.0.0.0–10.0.6.1 and Appliance 10.0.0.0–10.0.6.1. The issue is a denial of service caused by uncontrolled resource consumption in IBM Security Access Manager Container. Root cause details are not fully provided in the documents, but the i...
CVE-2023-30999 IBM Security Access Manager denial of service
IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow an attacker to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 254651...
CVE-2023-31005 IBM Security Access Manager Container privilege escalation
IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a local user to escalate their privileges due to an improper security configuration. IBM X-Force ID: 254767...
CVE-2023-31005
CVE-2023-31005 affects IBM Security Verify Access (Docker 10.0.0.0–10.0.6.1 and Appliance 10.0.0.0–10.0.6.1). Root cause is an improper security configuration that could allow a local user to escalate privileges. Affected products exposed multiple entry points in the container/appliance stack. Re...
CVE-2023-31005 IBM Security Access Manager Container privilege escalation
IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a local user to escalate their privileges due to an improper security configuration. IBM X-Force ID: 254767...
IBM Security Access Manager Container Resource Management Error Vulnerability
IBM Security Access Manager Container is a containerized identity and access management solution from International Business Machines IBM. IBM Security Access Manager Container suffers from a Resource Management Error vulnerability that originates from uncontrolled resource consumption and could...
IBM Security Access Manager Container 安全漏洞
IBM Security Access Manager is a product for information security management applications from International Business Machines IBM. The product enables access management control through integrated appliances for web, mobile and cloud computing. An unauthorized access vulnerability exists in IBM...
IBM Security Access Manager Container 代码问题漏洞
IBM Security Access Manager is a product for information security management applications from International Business Machines IBM. The product enables access management control through integrated appliances for web, mobile and cloud computing. An XML external entity injection vulnerability exist...
IBM Security Access Manager Container Security Vulnerability
IBM Security Access Manager Container is a containerized identity and access management solution from International Business Machines IBM. A security vulnerability exists in IBM Security Access Manager Container that stems from the ability to access the underlying system via a man-in-the-middle...
CVE-2023-51674
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhance...
CVE-2023-51674
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhance...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhance...
CVE-2023-51674
CVE-2023-51674 is a Cross‑Site Scripting vulnerability in the WordPress plugin Advanced Access Manager (AAM) – Restricted Content, Users & Roles, Enhanced Security and More, affecting versions up to and including 6.9.18. The issue arises from improper neutralization of user input during web page ...
CVE-2023-51674 WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhance...
WordPress plugin Advanced Access Manager Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2024-14234 · Unknown · Aam Advanced Access Manager
Name of the Vulnerable Software and Affected Versions: AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More versions through 6.9.18 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site...
The vulnerability of the Centralized Third-party Jars component (OkHttp) of the Oracle Access Manager control system allows a hacker to disclose protected information.
The vulnerability of the Centralized Third-party Jars component OkHttp in the Oracle Access Manager access control tool is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
IBM Security Access Manager Appliance Access Control Error Vulnerability (CNVD-2024-06217)
IBM Security Access Manager Appliance ISAM Appliance is a network appliance-based security solution from International Business Machines IBM. The product is mainly used for access control and Web-based threat protection, providing system performance monitoring, log analysis and diagnosis. An Acce...
CVE-2023-31001
IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254653...