CVE-2014-0963

CVE-2014-0963 affects IBM HTTP Server/GSKit within IBM WebSphere-related bundles (e.g., IBM HTTP Server in WebSphere/WAS components). The vulnerability arises from handling of certain SSL messages, where the TLS implementation can enter a loop in a specific error case, causing CPU utilization to ...

CVE-2014-6079

CVE-2014-6079 is an XSS vulnerability in IBM Security Access Manager for Web Local Management Interface affecting IBM Security Access Manager for Web 7.x (before 7.0.0-ISS-WGA-IF0009) and 8.x (before 8.0.0-ISS-WGA-FP0005), and Security Access Manager for Mobile 8.x (before 8.0.0-ISS-ISAM-FP0005)....

CVE-2017-1489

CVE-2017-1489 affects IBM Security Access Manager (ISM) across multiple releases, specifically e-community configurations in ISM versions 6.1, 7.0, 8.0, and 9.0. The root issue is a redirect vulnerability where ECSSO Master Authentication can redirect to a server not participating in the e-commun...

CVE-2014-4809

CVE-2014-4809 affects the WebSEAL component of IBM Security Access Manager for Web when e-community single sign-on is enabled. The IBM Security Access Manager for Web WebSEAL could become unresponsive under certain conditions, potentially causing a denial of service (component hang) with remote a...

CVE-2014-4823

CVE-2014-4823 affects IBM Security Access Manager for Web 7.x (before 7.0.0-ISS-WGA-IF0009) and 8.x (before 8.0.0-ISS-WGA-FP0005), plus Security Access Manager for Mobile 8.x (before 8.0.0-ISS-ISAM-FP0005). The administration console allows remote attackers to inject system commands via unspecifi...

CVE-2014-3052

The vulnerability CVE-2014-3052 affects IBM Security Access Manager for Web (ISAM) v8.0, firmware 8.0.0.2 and 8.0.0.3. A defect in the reverse-proxy configuration causes the jct-nist-compliance setting to be interpreted in the opposite way, so SSL connections to backends may not enforce NIST SP 8...

CVE-2014-3073

IBM Security Access Manager for Mobile 8.0 and IBM Security Access Manager for Web 7.0/8.0 are affected by CVE-2014-3073, a remote code execution vulnerability caused by improper input handling. An unauthenticated attacker could potentially run arbitrary code on affected appliances remotely, lead...

CVE-2014-3053

The CVE-2014-3053 issue affects IBM Security Access Manager for Mobile (8.0, firmware 8.0.0.0–8.0.0.3) and IBM Security Access Manager for Web (7.0 and 8.0; firmware 8.0.0.2–8.0.0.3). The Local Management Interface (LMI) can be bypassed via a login action with invalid credentials, enabling authen...