SI
Product
Security Identity Governance and Intelligence
39
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 11Medium 24Low 2
Watch
Add Security Identity Governance and Intelligence to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1407 | 8.8 | Sep 28 | IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system Affected: 5.2.0; 5.2.1 |
| CVE-2017-1483 | 8.6 | Sep 28 | IBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected… Affected: 5.2; 5.2.1 |
| CVE-2020-4795 | 8.2 | Feb 9 | IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information to an unauthorized user using a specially crafted HTTP request Affected: 5.2.6 |
| CVE-2017-1396 | 8.1 | Aug 6 | IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or… Affected: 5.2; 5.2.1; 5.2.2; 5.2.2.1; 5.2.3; 5.2.3.1; +1 more |
| CVE-2020-4245 | 7.5 | May 28 | IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user… Affected: 5.2.6 |
| CVE-2020-4232 | 7.5 | May 28 | IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials which could be used to attempt further… Affected: 5.2.6 |
| CVE-2018-1946 | 7.5 | Feb 21 | IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance supports interaction between multiple actors and allows those actors to negotiate which… Affected: 5.2; 5.2.1; 5.2.2; 5.2.2.1; 5.2.3; 5.2.3.1; +3 more |
| CVE-2018-1756 | 7.5 | Sep 7 | IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection Affected: 5.2.3.2; 5.2.4 |
| CVE-2017-1366 | 7.5 | Aug 6 | IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive… Affected: 5.2; 5.2.1; 5.2.2; 5.2.2.1; 5.2.3; 5.2.3.1; +1 more |
| CVE-2017-1411 | 7.5 | Aug 6 | IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not require that users should have strong passwords by default, which makes it easier for attackers to… Affected: 5.2; 5.2.1; 5.2.2; 5.2.2.1; 5.2.3; 5.2.3.1; +1 more |
| CVE-2020-4246 | 7.1 | May 28 | IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 5.2.6 |
Showing 11