SA
Product
Security Access Manager
48
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 13Medium 29Low 3
Watch
Add Security Access Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4135 | 8.8 | Jun 25 | IBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated users to impersonate other users Affected: 9.0.1 through 9.0.6 |
| CVE-2016-3025 | 8.1 | Nov 25 | IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it… Affected: 9.0.0; 9.0.0.1; 9.0.1.0 |
| CVE-2023-30998 | 7.8 | Jun 27 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls Affected: 10.0.0.0 through 10.0.7.1 |
| CVE-2023-30997 | 7.8 | Jun 27 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls Affected: 10.0.0.0 through 10.0.7.1 |
| CVE-2018-1887 | 7.8 | Dec 13 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for… Affected: 9.0.1.0 through 9.0.5.0 |
| CVE-2023-38371 | 7.5 | Jun 27 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive… Affected: 10.0.0.0 through 10.0.7.1 |
| CVE-2021-20439 | 7.5 | Jul 15 | IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user Affected: 9.0 |
| CVE-2019-4036 | 7.5 | Oct 25 | IBM Security Access Manager Appliance could allow unauthenticated attacker to cause a denial of service in the reverse proxy component Affected: All versions, or not specified |
| CVE-2018-1814 | 7.5 | Dec 13 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt… Affected: 9.0.1.0 through 9.0.5.0 |
| CVE-2018-1850 | 7.5 | Oct 22 | IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations when Advanced Access Control services are running Affected: 9.0.3.1; 9.0.4.0; 9.0.5.0 |
| CVE-2019-4707 | 7.1 | Jan 28 | IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 9.0.7.0 |
| CVE-2019-4145 | 7.1 | Jun 25 | IBM Security Access Manager 9.0.1 through 9.0.6 could reveal highly sensitive in specialized conditions to a local user which could be used in further attacks against the system Affected: 9.0.1 through 9.0.6 |
| CVE-2018-1970 | 7.1 | Feb 4 | IBM Security Identity Manager 7.0.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Affected: 7.0.1 through 7.0.1.10 |
Showing 13