Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
IbmSecurity Access Manager For Web

20 matches found

CVE
CVE•added 2013/12/17 11:0 a.m.•67 views

CVE-2013-6329

CVE-2013-6329 involves IBM GSKit and causes remote denial of service via a crafted SSLv2 session resumption handshake. Public details in connected IBM bulletins indicate GSKit issues affect multiple IBM products (Content Manager OnDemand 8.5/9.0; Tivoli Directory Server; IBM HTTP Server; WebSpher...

7.8CVSS8.6AI score0.03159EPSS
CVE
CVE•added 2018/06/06 5:0 p.m.•64 views

CVE-2017-1474

CVE-2017-1474 affects IBM Security Access Manager family. The IBM advisory lists affected versions: IBM Security Access Manager for Web 7.0–7.0.0.33, 8.0–8.0.1.6; IBM Security Access Manager for Mobile 8.0–8.0.1.6; IBM Security Access Manager Appliance 9.0–9.0.3.1; IBM Tivoli Access Manager for e...

5.3CVSS4.8AI score0.01759EPSS
CVE
CVE•added 2017/02/01 8:0 p.m.•63 views

CVE-2016-3045

CVE-2016-3045 affects IBM Security Access Manager for Web (ISAM) family. The issue is that ISAM stores sensitive information in URL parameters, creating potential information disclosure if URLs are exposed via server logs, Referer headers, or browser history. Affected products include ISAM for We...

4.3CVSS3.9AI score0.00842EPSS
CVE
CVE•added 2017/08/28 8:0 p.m.•61 views

CVE-2017-1489

CVE-2017-1489 affects IBM Security Access Manager (ISM) across multiple releases, specifically e-community configurations in ISM versions 6.1, 7.0, 8.0, and 9.0. The root issue is a redirect vulnerability where ECSSO Master Authentication can redirect to a server not participating in the e-commun...

6.1CVSS6AI score0.01182EPSS
CVE
CVE•added 2018/06/06 5:0 p.m.•57 views

CVE-2017-1480

CVE-2017-1480 affects IBM Security Access Manager Appliance: Web 8.0–8.0.1.6, Mobile 8.0–8.0.1.6, and ISAM 9.0–9.0.3.1. The issue is an information exposure where potentially sensitive data stored in log files could be read by a remote user. CVSS v3 base score is 4.3 (MEDIUM). Remediation provide...

4.3CVSS4.2AI score0.01776EPSS
CVE
CVE•added 2014/12/18 4:0 p.m.•55 views

CVE-2014-6086

IBM Security Access Manager for Mobile 8.x (before 8.0.1) and IBM Security Access Manager for Web (7.x before 7.0.0 FP10, and 8.x before 8.0.1) fail to enforce HTTPS, enabling remote attackers to sniff HTTP sessions and obtain sensitive information. This vulnerability is documented as CVE-2014-60...

5CVSS6.2AI score0.01369EPSS
CVE
CVE•added 2014/12/18 4:0 p.m.•53 views

CVE-2014-6088

IBM Security Access Manager for Mobile 8.x before 8.0.1 and IBM Security Access Manager for Web 7.x before 7.0.0 FP10, and 8.x before 8.0.1 are affected by an information disclosure vulnerability where an SSL client using a null cipher can lead to cleartext data exposure. This is a remote network...

5CVSS6.2AI score0.01369EPSS
CVE
CVE•added 2017/02/01 8:0 p.m.•53 views

CVE-2016-3018

CVE-2016-3018 affects IBM Security Access Manager family. IBM’s Security Bulletin confirms cross-site scripting in IBM Security Access Manager for Web (and related appliances) that could allow an attacker to inject JavaScript into the Web UI, potentially leading to credential disclosure within a ...

6.1CVSS5.9AI score0.00785EPSS
CVE
CVE•added 2014/12/18 4:0 p.m.•51 views

CVE-2014-6082

CVE-2014-6082 affects IBM Security Access Manager for Mobile (8.x, before 8.0.1) and IBM Security Access Manager for Web (7.x before 7.0.0 FP10, and 8.x before 8.0.1). A remote authenticated user can cause an administration UI outage (denial of service) via unspecified vectors. IBM lists remediat...

4CVSS6.3AI score0.01386EPSS
CVE
CVE•added 2015/11/08 10:0 p.m.•50 views

CVE-2015-4963

IBM Security Access Manager for Web is affected by CVE-2015-4963 due to mishandling of WebSEAL HTTPTransformation requests, allowing remote attackers to read/write arbitrary files. Affected versions include SAM for Web 7.x all releases prior to 7.0.0.16 and 8.x prior to 8.0.1.3. Remediation is av...

7.5CVSS6.8AI score0.03299EPSS
CVE
CVE•added 2018/06/06 5:0 p.m.•50 views

CVE-2017-1476

CVE-2017-1476 affects IBM Security Access Manager family. An information disclosure vulnerability arises from failure to properly enable HTTP Strict Transport Security (HSTS), enabling a remote attacker to obtain sensitive information via MITM. Affected products and versions include IBM Security ...

5.9CVSS5.3AI score0.02281EPSS
CVE
CVE•added 2014/12/18 4:0 p.m.•48 views

CVE-2014-6080

IBM Security Access Manager for Mobile 8.x and IBM Security Access Manager for Web 7.x/8.x are affected by CVE-2014-6080, an SQL injection vulnerability exploitable by remote authenticated attackers via unspecified vectors. The IBM security bulletin describes that an attacker could view, add, mod...

6.5CVSS8AI score0.0104EPSS
CVE
CVE•added 2014/12/18 4:0 p.m.•47 views

CVE-2014-6087

CVE-2014-6087 affects IBM Security Access Manager for Mobile and Web. The issue arises from weak SSL cipher suite usage that allows remote attackers to obtain sensitive information by sniffing traffic. Affected: IBM Security Access Manager for Mobile 8.0.x before 8.0.1; IBM Security Access Manage...

5CVSS6.2AI score0.01369EPSS
CVE
CVE•added 2014/12/18 4:0 p.m.•46 views

CVE-2014-6077

CVE-2014-6077 is a CSRF vulnerability affecting IBM Security Access Manager for Mobile 8.0.x up to 8.0.0.5 and IBM Security Access Manager for Web 7.x up to FP10 (7.0.0.x) and 8.x up to 8.0.1. The issue allows an attacker to hijack the authentication of an arbitrary user via requests that insert ...

6.8CVSS6.6AI score0.00633EPSS
CVE
CVE•added 2014/12/18 4:0 p.m.•45 views

CVE-2014-6084

CVE-2014-6084 affects IBM Security Access Manager for Mobile (8.0 line) and IBM Security Access Manager for Web (7.x before 7.0.0 FP10 and 8.x before 8.0.1). Root cause: use of weak SSL ciphers enables information disclosure via network sniffing. Impact: partial confidentiality loss of transmitte...

5CVSS6.2AI score0.01369EPSS
CVE
CVE•added 2014/12/18 4:0 p.m.•45 views

CVE-2014-6089

CVE-2014-6089 affects IBM Security Access Manager for Mobile 8.0.x (before 8.0.1) and IBM Security Access Manager for Web 7.x (before 7.0.0 FP10) and 8.x (before 8.0.1). A remote authenticated user can upload a file to a protected area, causing a denial of service. IBM provides patches: Web 7.0.x...

4CVSS6.3AI score0.01254EPSS
CVE
CVE•added 2014/12/18 4:0 p.m.•44 views

CVE-2014-6076

CVE-2014-6076 is a clickjacking vulnerability in IBM Security Access Manager for Mobile (8.x before 8.0.1) and IBM Security Access Manager for Web (7.x before 7.0.0 FP10 and 8.x before 8.0.1). Remote attackers can lure a user to load a crafted site to hijack clicking actions. IBM’s bulletin lists...

4.3CVSS6.7AI score0.00956EPSS
CVE
CVE•added 2014/12/18 4:0 p.m.•43 views

CVE-2014-6083

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10, and 8.x before 8.0.1 allow remote attackers to obtain sensitive cookie information by sniffing unencrypted HTTP sessions. Affects Mobile 8.0 lineage and Web 7.x/8.x; CVSS base score ...

5CVSS6.3AI score0.01369EPSS
CVE
CVE•added 2016/11/25 3:38 a.m.•43 views

CVE-2016-3028

CVE-2016-3028 affects IBM Security Access Manager products: ISAM for Web 7.0 before IF2, ISAM for Web 8.0 before 8.0.1.4 IF3, and ISAM 9.0 before 9.0.1.0 IF5, plus IBM Security Access Manager for Mobile 8.0 and 9.0. The flaw allows a remote authenticated attacker with admin access to the LMI to e...

9.1CVSS9.2AI score0.03537EPSS
CVE
CVE•added 2014/12/18 4:0 p.m.•37 views

CVE-2014-6078

IBM Security Access Manager for Mobile (8.0.x) and IBM Security Access Manager for Web (7.x/8.x) are affected by CVE-2014-6078, which enables brute-force login attempts due to no account lockout after invalid logins. The vulnerability is remote, low complexity, and does not require authentication...

5CVSS6.5AI score0.01373EPSS