Security Access Manager Security Vulnerabilities and Issues — Security Access Manager CVE List

Lucene search

IbmSecurity Access Manager

4 matches found

CVE•added 2018/01/10 5:29 p.m.•51 views

CVE-2017-1534

IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a u...

6.1CVSS5.8AI score0.00291EPSS

CVE•added 2018/01/10 5:29 p.m.•42 views

CVE-2017-1533

IBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130675...

6.1CVSS5.7AI score0.00309EPSS

CVE•added 2018/01/11 5:29 p.m.•37 views

CVE-2017-1478

IBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 128613.

3.3CVSS3.4AI score0.00089EPSS

CVE•added 2018/01/10 5:29 p.m.•36 views

CVE-2017-1459

IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 128378.

4.9CVSS4.1AI score0.00102EPSS