Security Access Manager@9.0.3.1 Security Vulnerabilities and Issues — Security Access Manager@9.0.3.1 CVE List

Lucene search

IbmSecurity Access Manager9.0.3.1

9 matches found

CVE•added 2018/10/22 1:0 p.m.•49 views

CVE-2018-1850

IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations when Advanced Access Control services are running. IBM X-Force ID: 150998.

8.8CVSS8AI score0.00535EPSS

CVE•added 2018/06/06 5:29 p.m.•48 views

CVE-2017-1474

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.

5.3CVSS4.8AI score0.00191EPSS

CVE•added 2018/03/08 4:29 p.m.•45 views

CVE-2018-1443

An XML parsing vulnerability affects IBM SAML-based single sign-on (SSO) systems (IBM Security Access Manager 9.0.0 - 9.0.4 and IBM Tivoli Federated Identity Manager 6.2 - 6.0.2.) This vulnerability can allow an attacker with authenticated access to trick SAML systems into authenticating as a diffe...

5.9CVSS5.4AI score0.00061EPSS

CVE•added 2018/01/10 5:29 p.m.•42 views

CVE-2017-1533

IBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130675...

6.1CVSS5.7AI score0.00309EPSS

CVE•added 2018/06/06 5:29 p.m.•41 views

CVE-2017-1480

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617.

4.3CVSS4.2AI score0.00128EPSS

CVE•added 2018/01/11 5:29 p.m.•37 views

CVE-2017-1478

IBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 128613.

3.3CVSS3.4AI score0.00089EPSS

CVE•added 2018/01/10 5:29 p.m.•36 views

CVE-2017-1459

IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 128378.

4.9CVSS4.1AI score0.00102EPSS

CVE•added 2018/04/23 1:29 p.m.•36 views

CVE-2017-1473

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 128605.

7.5CVSS7.2AI score0.00112EPSS

CVE•added 2018/06/06 5:29 p.m.•36 views

CVE-2017-1476

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive info...

5.9CVSS5.3AI score0.00263EPSS