SP
Product
Security Privileged Identity Manager
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 9Low 3
Watch
Add Security Privileged Identity Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-5988 | 6.5 | Feb 1 | IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user Affected: 2.0.2; 2.1 |
| CVE-2016-2996 | 6.5 | Nov 24 | IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append to arbitrary files via unspecified… Affected: 2.0.0; 2.0.1; 2.0.2 |
| CVE-2016-5990 | 6.3 | Feb 1 | IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automatically executed by the server Affected: 2.0.2; 2.1 |
| CVE-2016-5966 | 5.9 | Feb 1 | IBM Security Privileged Identity Manager Virtual Appliance could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict… Affected: 2.0.2; 2.1 |
| CVE-2016-5960 | 5.5 | Jun 7 | IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores user credentials in plain in clear text which can be read by a local user Affected: 2.0.2; 2.1 |
| CVE-2016-5959 | 5.3 | Jun 7 | IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters Affected: 2.0.2; 2.1 |
| CVE-2018-1626 | 4.3 | Apr 2 | IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking… Affected: 2.1.1 |
| CVE-2018-1625 | 4.3 | Apr 2 | IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that includes sensitive information about its environment, users, or associated data Affected: 2.1.1 |
| CVE-2017-1705 | 4.3 | Mar 30 | IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments Affected: 2.1.0 |
Showing 9