SA
Product
Security Access Manager For Mobile
27
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 10Low 2
Watch
Add Security Access Manager For Mobile to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1534 | 6.1 | Jan 10 | IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 8.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; +6 more |
| CVE-2017-1489 | 6.1 | Aug 29 | IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability Affected: 8.0; 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; +10 more |
| CVE-2016-3018 | 6.1 | Feb 1 | IBM Security Access Manager for Web is vulnerable to cross-site scripting Affected: 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1.0; +3 more |
| CVE-2017-1476 | 5.9 | Jun 6 | IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure… Affected: 8.0.0 through 8.0.1.6 |
| CVE-2016-3043 | 5.9 | Feb 1 | IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: All versions, or not specified |
| CVE-2015-5013 | 5.5 | Feb 8 | The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access Affected: All versions, or not specified |
| CVE-2016-3020 | 5.5 | Feb 7 | IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation Affected: All versions, or not specified |
| CVE-2017-1474 | 5.3 | Jun 6 | IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users Affected: 8.0.0 through 8.0.1.6 |
| CVE-2017-1480 | 4.3 | Jun 6 | IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user Affected: 8.0.0 through 8.0.1.6 |
| CVE-2017-1459 | 4.2 | Jan 10 | IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by… Affected: All versions, or not specified |
Showing 10