SA
Product
Security Access Manager For Mobile 8.0 Firmware
On CISA KEVExploited in the wild
13
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 5Low 1
Watch
Add Security Access Manager For Mobile 8.0 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3027 | 6.5 | Feb 1 | IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1.0; 8.0.1.2; +2 more |
| CVE-2016-3022 | 6.5 | Feb 1 | IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorrect file permissions Affected: 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1.0; 8.0.1.2; +2 more |
| CVE-2016-3023 | 5.3 | Feb 1 | IBM Security Access Manager for Web could allow an unauthenticated user to gain access to sensitive information by entering invalid file names Affected: 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1.0; 8.0.1.2; +2 more |
| CVE-2016-3016 | 4.4 | Feb 1 | IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an… Affected: 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1.0; 8.0.1.2; +2 more |
| CVE-2016-3024 | 4.0 | Feb 1 | IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the system Affected: 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1.0; 8.0.1.2; +2 more |
Showing 5