SA
Product
Security Access Manager
48
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 13Medium 29Low 3
Watch
Add Security Access Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4150 | 3.7 | Jun 25 | IBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a… Affected: 9.0.1 through 9.0.6 |
| CVE-2018-1804 | 3.7 | Dec 13 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 does not set the secure attribute on authorization tokens or session cookies Affected: 9.0.1.0 through 9.0.5.0 |
| CVE-2016-3045 | 3.7 | Feb 1 | IBM Security Access Manager for Web stores sensitive information in URL parameters Affected: 9.0.0; 9.0.0.1; 9.0.1.0 |
Showing 3