SA
Product
Security Access Manager For Web 7.0 Firmware
On CISA KEVExploited in the wild
17
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 5Low 1
Watch
Add Security Access Manager For Web 7.0 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3022 | 6.5 | Feb 1 | IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorrect file permissions Affected: 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.0.4; 7.0.0.5; 7.0.0.6; +10 more |
| CVE-2016-3043 | 5.9 | Feb 1 | IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: All versions, or not specified |
| CVE-2016-3020 | 5.5 | Feb 7 | IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation Affected: All versions, or not specified |
| CVE-2016-3023 | 5.3 | Feb 1 | IBM Security Access Manager for Web could allow an unauthenticated user to gain access to sensitive information by entering invalid file names Affected: 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.0.4; 7.0.0.5; 7.0.0.6; +10 more |
| CVE-2016-3016 | 4.4 | Feb 1 | IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an… Affected: 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.0.4; 7.0.0.5; 7.0.0.6; +10 more |
Showing 5