SI
Product
Security Identity Manager Virtual Appliance
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 4Low 4
Watch
Add Security Identity Manager Virtual Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9704 | 6.1 | Feb 1 | IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.1.0; 7.0.1.1; +3 more |
| CVE-2018-1968 | 5.3 | Jul 11 | IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users Affected: 7.0.1 through 7.0.1.12 |
| CVE-2019-4704 | 4.3 | Jul 1 | IBM Security Identity Manager Virtual Appliance 7.0.2 does not set the secure attribute on authorization tokens or session cookies Affected: 7.0.2 |
| CVE-2016-0367 | 4.3 | Feb 21 | IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 allows remote authenticated users to obtain sensitive information by reading an error message Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.1.0; 7.0.1.1; +1 more |
Showing 4