Security Access Manager@9.0.0 Security Vulnerabilities and Issues — Security Access Manager@9.0.0 CVE List

Lucene search

IbmSecurity Access Manager9.0.0

4 matches found

CVE•added 2017/02/01 8:59 p.m.•45 views

CVE-2016-3045

IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history.

4.3CVSS3.9AI score0.00187EPSS

CVE•added 2017/06/07 5:29 p.m.•37 views

CVE-2016-3051

IBM Security Access Manager for Web 9.0.0 could allow an authenticated user to access some privileged functionality of the server. IBM X-Force ID: 114714.

4.3CVSS4.3AI score0.00243EPSS

CVE•added 2017/06/07 5:29 p.m.•35 views

CVE-2016-3019

IBM Security Access Manager for Web 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 114462.

6.5CVSS6.2AI score0.0013EPSS

CVE•added 2017/02/01 8:59 p.m.•34 views

CVE-2016-3018

IBM Security Access Manager for Web is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

6.1CVSS5.9AI score0.00239EPSS