TF
Product
Tivoli Federated Identity Manager
22
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 0
Watch
Add Tivoli Federated Identity Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1319 | 7.5 | Jun 8 | IBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure attribute in encrypted session (SSL) cookie Affected: 6.2.0; 6.2.1; 6.2.2 |
| CVE-2015-4959 | 6.1 | Jan 18 | Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP16 allows remote attackers to inject arbitrary web script or HTML via a… Affected: 6.2.2 |
| CVE-2018-1443 | 5.9 | Mar 8 | An XML parsing vulnerability affects IBM SAML-based single sign-on (SSO) systems (IBM Security Access Manager 9.0.0 - 9.0.4 and IBM Tivoli Federated Identity Manager 6.2 - 6.0.2.)… Affected: 6.2.0; 6.2.1; 6.2.2 |
| CVE-2017-1320 | 5.4 | May 22 | IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting Affected: 6.2.0; 6.2.0.1; 6.2.0.2; 6.2.0.3; 6.2.0.8; 6.2.0.9; +34 more |
| CVE-2015-1966 | – | Jul 4 | Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before FP17, 6.2.1 before FP9, and 6.2.2 before FP15, as used in Security… Affected: 6.2.0; 6.2.1; 6.2.2 |
| CVE-2014-3097 | – | Oct 2 | Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before… Affected: 6.2.0; 6.2.1; 6.2.2 |
| CVE-2013-5429 | – | Jan 21 | The Risk Based Access functionality in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.2 before… Affected: 6.2.2; 6.2.2.1; 6.2.2.2; 6.2.2.3; 6.2.2.4; 6.2.2.5; +3 more |
| CVE-2013-5431 | – | Nov 1 | Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity… Affected: 6.1.1; 6.2.0; 6.2.1; 6.2.2 |
| CVE-2013-0582 | – | May 2 | Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.12, 6.2.1 before 6.2.1.5, and 6.2.2 before 6.2.2.4 and Tivoli Federated… Affected: 6.2.0; 6.2.0.1; 6.2.0.2; 6.2.0.3; 6.2.0.8; 6.2.0.9; +10 more |
| CVE-2012-6359 | – | Jan 18 | IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.11, 6.2.1 before 6.2.1.3, and 6.2.2 before 6.2.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG)… Affected: 6.2.0; 6.2.0.1; 6.2.0.2; 6.2.0.3; 6.2.0.8; 6.2.0.9; +5 more |
| CVE-2012-3310 | – | Jan 17 | IBM Tivoli Federated Identity Manager (TFIM) before 6.1.1.14, 6.2.0 before 6.2.0.12, and 6.2.1 before 6.2.1.4 allows context-dependent attackers to discover (1) a cleartext LDAP… Affected: through 6.1.1.13; 6.1.1; 6.1.1.12; 6.2.0; 6.2.0.1; 6.2.0.2; +9 more |
| CVE-2012-3315 | – | Nov 8 | The Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM) through 6.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) before… Affected: through 6.2.2; 6.1.1; 6.2.0; 6.2.0.1; 6.2.0.2; 6.2.0.3; +3 more |
| CVE-2012-3314 | – | Oct 2 | IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, 6.2.1, and 6.2.2 allow remote attackers to establish… Affected: 6.1.1; 6.2.0; 6.2.1; 6.2.2 |
| CVE-2011-1386 | – | Jan 4 | IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not properly handle signature validations… Affected: 6.1.1; 6.2.0; 6.2.1 |
| CVE-2011-3138 | – | Aug 12 | The LTPA STS module support implementation in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG)… Affected: 6.2.0; 6.2.0.1; 6.2.0.2; 6.2.0.3; 6.2.0.8 |
| CVE-2011-3137 | – | Aug 12 | Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway… Affected: 6.2.0; 6.2.0.1; 6.2.0.2; 6.2.0.3; 6.2.0.8 |
| CVE-2011-3136 | – | Aug 12 | Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway… Affected: 6.2.0; 6.2.0.1; 6.2.0.2; 6.2.0.3; 6.2.0.8 |
| CVE-2011-3135 | – | Aug 12 | Unspecified vulnerability in the Runtime in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0… Affected: 6.2.0; 6.2.0.1; 6.2.0.2; 6.2.0.3; 6.2.0.8 |
| CVE-2009-5085 | – | Aug 12 | IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID provider, does not delete the site information cookie in response to a user's… Affected: 6.2.0; 6.2.0.1 |
| CVE-2009-5084 | – | Aug 12 | IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when com.tivoli.am.fim.infocard.delegates.InfoCardSTSDelegate tracing is enabled, creates a cleartext log entry… Affected: 6.2.0; 6.2.0.1 |
| CVE-2009-5083 | – | Aug 12 | IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID relying party, does not perform the expected login rejection upon receiving an… Affected: 6.2.0; 6.2.0.1 |
| CVE-2008-7299 | – | Aug 12 | IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2 uses an incomplete SAML 1.x browser-artifact, which allows remote OpenID providers to spoof assertions via… Affected: 6.2.0; 6.2.0.1 |
Showing 22