CVE-2014-6079

CVE-2014-6079 is an XSS vulnerability in IBM Security Access Manager for Web Local Management Interface affecting IBM Security Access Manager for Web 7.x (before 7.0.0-ISS-WGA-IF0009) and 8.x (before 8.0.0-ISS-WGA-FP0005), and Security Access Manager for Mobile 8.x (before 8.0.0-ISS-ISAM-FP0005)....

CVE-2014-4823

CVE-2014-4823 affects IBM Security Access Manager for Web 7.x (before 7.0.0-ISS-WGA-IF0009) and 8.x (before 8.0.0-ISS-WGA-FP0005), plus Security Access Manager for Mobile 8.x (before 8.0.0-ISS-ISAM-FP0005). The administration console allows remote attackers to inject system commands via unspecifi...

CVE-2014-3073

IBM Security Access Manager for Mobile 8.0 and IBM Security Access Manager for Web 7.0/8.0 are affected by CVE-2014-3073, a remote code execution vulnerability caused by improper input handling. An unauthenticated attacker could potentially run arbitrary code on affected appliances remotely, lead...

CVE-2014-3053

The CVE-2014-3053 issue affects IBM Security Access Manager for Mobile (8.0, firmware 8.0.0.0–8.0.0.3) and IBM Security Access Manager for Web (7.0 and 8.0; firmware 8.0.0.2–8.0.0.3). The Local Management Interface (LMI) can be bypassed via a login action with invalid credentials, enabling authen...