SA
Product
Security Access Manager For Web
20
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 5Low 1
Watch
Add Security Access Manager For Web to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3028 | 9.1 | Nov 25 | IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute… Affected: 7.0.0; 8.0.0; 8.0.0.2; 8.0.0.4; 8.0.0.5; 8.0.1; +3 more |
| CVE-2017-1489 | 6.1 | Aug 29 | IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability Affected: 8.0; 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; +10 more |
| CVE-2016-3018 | 6.1 | Feb 1 | IBM Security Access Manager for Web is vulnerable to cross-site scripting Affected: 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1.0; +3 more |
| CVE-2017-1476 | 5.9 | Jun 6 | IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure… Affected: 7.0.0 through 7.0.0.32; 8.0.0 through 8.0.1.6 |
| CVE-2017-1474 | 5.3 | Jun 6 | IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users Affected: 7.0.0 through 7.0.0.32; 8.0.0 through 8.0.1.6 |
| CVE-2017-1480 | 4.3 | Jun 6 | IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user Affected: 8.0.0 through 8.0.1.6 |
| CVE-2016-3045 | 3.7 | Feb 1 | IBM Security Access Manager for Web stores sensitive information in URL parameters Affected: 7.0.0; 8.0.0; 8.0.1; 8.0.1.1; 8.0.1.2; 8.0.1.3; +1 more |
| CVE-2015-4963 | – | Nov 8 | IBM Security Access Manager for Web 7.x before 7.0.0.16 and 8.x before 8.0.1.3 mishandles WebSEAL HTTPTransformation requests, which allows remote attackers to read or write to… Affected: 7.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.0.4; 7.0.0.5; +20 more |
| CVE-2014-6089 | – | Dec 18 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a… Affected: 7.0; 8.0 |
| CVE-2014-6088 | – | Dec 18 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to obtain sensitive… Affected: 7.0; 8.0 |
| CVE-2014-6087 | – | Dec 18 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 make it easier for remote attackers to… Affected: 7.0; 8.0 |
| CVE-2014-6086 | – | Dec 18 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not ensure that HTTPS is used, which… Affected: 7.0; 8.0 |
| CVE-2014-6084 | – | Dec 18 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 make it easier for remote attackers to… Affected: 7.0; 8.0 |
| CVE-2014-6083 | – | Dec 18 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to obtain sensitive… Affected: 7.0; 8.0 |
| CVE-2014-6082 | – | Dec 18 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a… Affected: 7.0; 8.0 |
| CVE-2014-6080 | – | Dec 18 | SQL injection vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allows remote… Affected: 7.0; 8.0 |
| CVE-2014-6078 | – | Dec 18 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not have a lockout period after invalid… Affected: 7.0; 8.0 |
| CVE-2014-6077 | – | Dec 18 | Cross-site request forgery (CSRF) vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before… Affected: 7.0; 8.0 |
| CVE-2014-6076 | – | Dec 18 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to conduct… Affected: 7.0; 8.0 |
| CVE-2013-6329 | – | Dec 17 | IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted… Affected: 6.0; 6.1; 6.1.1; 7.0 |
Showing 20