Security Access Manager For Web@* Security Vulnerabilities and Issues — Security Access Manager For Web@* CVE List

Lucene search

IbmSecurity Access Manager For Web*

3 matches found

CVE•added 2018/06/06 5:29 p.m.•48 views

CVE-2017-1474

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.

5.3CVSS4.8AI score0.00191EPSS

CVE•added 2018/06/06 5:29 p.m.•41 views

CVE-2017-1480

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617.

4.3CVSS4.2AI score0.00128EPSS

CVE•added 2018/06/06 5:29 p.m.•36 views

CVE-2017-1476

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive info...

5.9CVSS5.3AI score0.00263EPSS