Login Request a demo
SA
Product
Security Access Manager For Mobile
by Ibm · last CVE Jun 6, 2018
27
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities27In the news0Timeline
Severity mix
Critical 0High 3Medium 10Low 2
Severity
All severities27Critical0High3Medium10Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Security Access Manager For Mobile to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-3025
8.1
2%
Nov 25
IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it…
Affected: 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; +4 more
CVE-2017-1473
7.5
1%
Apr 23
IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
Affected: 8.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; +6 more
CVE-2016-5919
7.5
1%
Feb 16
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information
Affected: All versions, or not specified
CVE-2017-1534
6.1
1%
Jan 10
IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
Affected: 8.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; +6 more
CVE-2017-1489
6.1
1%
Aug 29
IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability
Affected: 8.0; 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; +10 more
CVE-2016-3018
6.1
1%
Feb 1
IBM Security Access Manager for Web is vulnerable to cross-site scripting
Affected: 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1.0; +3 more
CVE-2017-1476
5.9
2%
Jun 6
IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure…
Affected: 8.0.0 through 8.0.1.6
CVE-2016-3043
5.9
1%
Feb 1
IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security
Affected: All versions, or not specified
CVE-2015-5013
5.5
0%
Feb 8
The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access
Affected: All versions, or not specified
CVE-2016-3020
5.5
1%
Feb 7
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation
Affected: All versions, or not specified
CVE-2017-1474
5.3
2%
Jun 6
IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users
Affected: 8.0.0 through 8.0.1.6
CVE-2017-1480
4.3
2%
Jun 6
IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user
Affected: 8.0.0 through 8.0.1.6
CVE-2017-1459
4.2
1%
Jan 10
IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by…
Affected: All versions, or not specified
CVE-2016-3045
3.7
1%
Feb 1
IBM Security Access Manager for Web stores sensitive information in URL parameters
Affected: 8.0.0.0; 8.0.0.5; 8.0.1; 8.0.1.2; 8.0.1.3; 8.0.1.4
CVE-2016-3046
2.7
1%
Feb 1
IBM Security Access Manager for Web is vulnerable to SQL injection
Affected: All versions, or not specified
CVE-2014-6089
–
1%
Dec 18
IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a…
Affected: 8.0
CVE-2014-6088
–
1%
Dec 18
IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to obtain sensitive…
Affected: 8.0
CVE-2014-6087
–
1%
Dec 18
IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 make it easier for remote attackers to…
Affected: 8.0
CVE-2014-6086
–
1%
Dec 18
IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not ensure that HTTPS is used, which…
Affected: 8.0
CVE-2014-6084
–
1%
Dec 18
IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 make it easier for remote attackers to…
Affected: 8.0
CVE-2014-6083
–
1%
Dec 18
IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to obtain sensitive…
Affected: 8.0
CVE-2014-6082
–
1%
Dec 18
IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a…
Affected: 8.0
CVE-2014-6080
–
1%
Dec 18
SQL injection vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allows remote…
Affected: 8.0
CVE-2014-6078
–
1%
Dec 18
IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not have a lockout period after invalid…
Affected: 8.0
CVE-2014-6077
–
1%
Dec 18
Cross-site request forgery (CSRF) vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before…
Affected: 8.0
CVE-2014-6076
–
1%
Dec 18
IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to conduct…
Affected: 8.0
CVE-2014-4751
–
2%
Aug 12
Cross-site scripting (XSS) vulnerability in IBM Security Access Manager for Mobile 8.0.0.0, 8.0.0.1, and 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via…
Affected: 8.0.0.0; 8.0.0.1; 8.0.0.3
Showing 27