Unscored severity · published Nov 18, 2014
CVE-2014-6105
IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to conduct clickjacking attacks via unspecified vectors
–
CVSS
2.4%
EPSS
No
On KEV
Description
IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
Security Identity Manager · Ibm
6.0.0.0; 6.0.0.1; 6.0.0.2; 6.0.0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-6105
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-6105
secunia.com
http://secunia.com/advisories/62363
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66496
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66624
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66635
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66637
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66642
More from Security Identity Manager
9.9
CVE-2018-1969
IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment
9.8
CVE-2019-4675
IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound…
8.8
CVE-2021-29686
IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they should not have access to
8.8
CVE-2019-4561
IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data
8.8
CVE-2018-1453
IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dangerous types that can be automatically processed within the…