Security Access Manager For Web Security Vulnerabilities and Issues — Security Access Manager For Web CVE List

Lucene search

IbmSecurity Access Manager For Web

3 matches found

CVE•added 2017/08/29 1:35 a.m.•46 views

CVE-2017-1489

IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.

6.1CVSS6AI score0.0021EPSS

CVE•added 2017/02/01 8:59 p.m.•45 views

CVE-2016-3045

IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history.

4.3CVSS3.9AI score0.00187EPSS

CVE•added 2017/02/01 8:59 p.m.•34 views

CVE-2016-3018

IBM Security Access Manager for Web is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

6.1CVSS5.9AI score0.00239EPSS