Security Access Manager 9.0 Firmware Security Vulnerabilities and Issues — Security Access Manager 9.0 Firmware CVE List

Lucene search

IbmSecurity Access Manager 9.0 Firmware

4 matches found

CVE•added 2016/02/15 2:59 a.m.•40 views

CVE-2015-5010

IBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before 9.0.0.1 IF1 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.

7.5CVSS7.2AI score0.00278EPSS

CVE•added 2017/02/01 8:59 p.m.•36 views

CVE-2016-3017

IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations.

7.5CVSS7.2AI score0.0025EPSS

CVE•added 2016/02/15 2:59 a.m.•31 views

CVE-2015-5012

The SSH implementation on IBM Security Access Manager for Web appliances 7.0 before 7.0.0 FP19, 8.0 before 8.0.1.3 IF3, and 9.0 before 9.0.0.0 IF1 does not properly restrict the set of MAC algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspe...

7.5CVSS7.3AI score0.00278EPSS

CVE•added 2017/02/16 8:59 p.m.•31 views

CVE-2016-5919

IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM Reference #: 1996868.

7.5CVSS7.3AI score0.00128EPSS