SA
Product
Security Access Manager
48
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 13Medium 29Low 3
Watch
Add Security Access Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4153 | 6.8 | Jun 25 | IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 9.0.1 through 9.0.6 |
| CVE-2023-38370 | 6.5 | Jun 27 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1, under certain configurations, could allow a user on the network to install malicious packages Affected: 10.0.0.0 through 10.0.7.1 |
| CVE-2020-4461 | 6.5 | May 20 | IBM Security Access Manager Appliance 9.0.7.1 could allow an authenticated user to bypass security by allowing id_token claims manipulation without verification Affected: 9.0 before 9.0.7.1 |
| CVE-2018-1813 | 6.5 | Dec 13 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation which allows attackers to bypass… Affected: 9.0.1.0 through 9.0.5.0 |
| CVE-2024-35137 | 6.2 | Jun 28 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed Affected: 10.0.0.0 through 10.0.7.1 |
| CVE-2019-4552 | 6.1 | Oct 15 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attacks Affected: 9.0.7.0 before 9.0.7.2 |
| CVE-2019-4725 | 6.1 | Oct 6 | IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting Affected: 9.0.0.0 before 9.0.7.0 |
| CVE-2019-4157 | 6.1 | Jun 25 | IBM Security Access Manager 9.0.1 through 9.0.6 is vulnerable to cross-site scripting Affected: 9.0.1 through 9.0.6 |
| CVE-2018-1815 | 6.1 | Dec 13 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 for Enterprise Single-Sign On is vulnerable to cross-site scripting Affected: 9.0.1.0 through 9.0.5.0 |
| CVE-2018-1803 | 6.1 | Dec 13 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 could allow a remote attacker to hijack the clicking action of the victim Affected: 9.0.1.0 through 9.0.5.0 |
| CVE-2017-1489 | 6.1 | Aug 29 | IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability Affected: 9.0.0.0; 9.0.0.1; 9.0.1.0; 9.0.2.0; 9.0.2.1; 9.0.3.0; +1 more |
| CVE-2016-3018 | 6.1 | Feb 1 | IBM Security Access Manager for Web is vulnerable to cross-site scripting Affected: 9.0.0; 9.0.0.1; 9.0.1.0 |
| CVE-2019-4156 | 5.9 | Jun 25 | IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 9.0.1 through 9.0.6 |
| CVE-2019-4151 | 5.9 | Jun 25 | IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 9.0.1 through 9.0.6 |
| CVE-2017-1476 | 5.9 | Jun 6 | IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure… Affected: 9.0.0 through 9.0.3.1 |
| CVE-2018-1443 | 5.9 | Mar 8 | An XML parsing vulnerability affects IBM SAML-based single sign-on (SSO) systems (IBM Security Access Manager 9.0.0 - 9.0.4 and IBM Tivoli Federated Identity Manager 6.2 - 6.0.2.)… Affected: 9.0.0 through 9.0.4 |
| CVE-2024-35139 | 5.5 | Jun 28 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from the container due to incorrect default permissions Affected: 10.0.0.0 through 10.0.7.1 |
| CVE-2023-38368 | 5.5 | Jun 27 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could disclose sensitive information to a local user to do improper permission controls Affected: 10.0.0.0 through 10.0.7.1 |
| CVE-2019-4158 | 5.4 | Jun 25 | IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resources or functionality to unintended actors Affected: 9.0.1 through 9.0.6 |
| CVE-2018-1740 | 5.4 | Dec 13 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site scripting Affected: 9.0.1.0 through 9.0.5.0 |
| CVE-2018-1653 | 5.4 | Dec 13 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site scripting Affected: 9.0.1.0 through 9.0.5.0 |
| CVE-2020-4699 | 5.3 | Oct 12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further… Affected: 9.0.7.0 |
| CVE-2020-4661 | 5.3 | Oct 12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further… Affected: 9.0.7.0 |
| CVE-2020-4660 | 5.3 | Oct 12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further… Affected: 9.0.7.0 |
| CVE-2018-1886 | 5.3 | Dec 13 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 discloses sensitive information to unauthorized users Affected: 9.0.1.0 through 9.0.5.0 |
| CVE-2017-1474 | 5.3 | Jun 6 | IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users Affected: 9.0.0 through 9.0.3.1 |
| CVE-2019-4152 | 4.4 | Jun 25 | IBM Security Access Manager 9.0.1 through 9.0.6 does not invalidate session tokens in a timely manner Affected: 9.0.1 through 9.0.6 |
| CVE-2018-1805 | 4.3 | Dec 13 | IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 generates an error message that includes sensitive information about its environment, users,… Affected: 9.0.1.0 through 9.0.5.0 |
| CVE-2017-1480 | 4.3 | Jun 6 | IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user Affected: 9.0.0 through 9.0.3.1 |
Showing 29