SI
Product
Security Identity Manager Virtual Appliance
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 4Low 4
Watch
Add Security Identity Manager Virtual Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-0332 | 9.8 | Jan 12 | IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 do not properly restrict failed login attempts, which makes it easier… Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.1.0 |
| CVE-2016-0324 | 8.8 | Jan 12 | IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote authenticated users to execute arbitrary code with… Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.1.0 |
| CVE-2019-4676 | 7.8 | Jul 1 | IBM Security Identity Manager Virtual Appliance 7.0.2 stores user credentials in plain in clear text which can be read by a local user Affected: 7.0.2 |
| CVE-2016-0327 | 7.8 | Jan 12 | IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows local users to gain administrator privileges via unspecified… Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.1.0 |
| CVE-2016-9704 | 6.1 | Feb 1 | IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.1.0; 7.0.1.1; +3 more |
| CVE-2018-1968 | 5.3 | Jul 11 | IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users Affected: 7.0.1 through 7.0.1.12 |
| CVE-2019-4704 | 4.3 | Jul 1 | IBM Security Identity Manager Virtual Appliance 7.0.2 does not set the secure attribute on authorization tokens or session cookies Affected: 7.0.2 |
| CVE-2016-0367 | 4.3 | Feb 21 | IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 allows remote authenticated users to obtain sensitive information by reading an error message Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.1.0; 7.0.1.1; +1 more |
| CVE-2016-0351 | 3.7 | Feb 21 | IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 does not set the secure flag for the session cookie in an HTTPS session, which makes it easier… Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.1.0; 7.0.1.1; +1 more |
| CVE-2019-4706 | 2.7 | Jul 1 | IBM Security Identity Manager Virtual Appliance 7.0.2 writes information to log files which can be of a sensitive nature and give valuable guidance to an attacker or expose… Affected: 7.0.2 |
| CVE-2019-4705 | 2.7 | Jul 1 | IBM Security Identity Manager Virtual Appliance 7.0.2 discloses sensitive information to unauthorized users Affected: 7.0.2 |
| CVE-2016-9703 | 2.4 | Feb 1 | IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain… Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.1.0; 7.0.1.1; +3 more |
Showing 12