Security Access Manager Appliance (Ibm) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 24 known versions, newest CVE from 2020-10-14. Vendor: Ibm.
CVEs of Security Access Manager Appliance
- CVE-2020-4395 - CVSS 6.3 (medium), 2020-10-14: IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on…
- CVE-2019-4725 - CVSS 6.1 (medium), 2020-10-06: IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
- CVE-2020-4461 - CVSS 6.5 (medium), 2020-05-20: IBM Security Access Manager Appliance 9.0.7.1 could allow an authenticated user to bypass security by allowing id_token claims manipulation without…
- CVE-2019-4707 - CVSS 7.1 (high), 2020-01-28: IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could…
- CVE-2018-1887 - CVSS 7.8 (high), 2018-12-13: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 contains hard-coded credentials, such as a password or cryptographic…
- CVE-2018-1886 - CVSS 5.3 (medium), 2018-12-13: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 discloses sensitive information to unauthorized users. The information…
- CVE-2018-1653 - CVSS 5.4 (medium), 2018-12-13: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site scripting. This vulnerability allows users…
- CVE-2018-1804 - CVSS 3.7 (low), 2018-12-13: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 does not set the secure attribute on authorization tokens or session…
- CVE-2018-1814 - CVSS 7.5 (high), 2018-12-13: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses weaker than expected cryptographic algorithms that could allow an…
- CVE-2018-1803 - CVSS 6.1 (medium), 2018-12-13: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 could allow a remote attacker to hijack the clicking action of the…
- CVE-2018-1813 - CVSS 6.5 (medium), 2018-12-13: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation which allows attackers…
- CVE-2018-1740 - CVSS 5.4 (medium), 2018-12-13: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site scripting. This vulnerability allows users…
- CVE-2018-1805 - CVSS 4.3 (medium), 2018-12-13: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 generates an error message that includes sensitive information about its…
- CVE-2018-1815 - CVSS 6.1 (medium), 2018-12-13: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 for Enterprise Single-Sign On is vulnerable to cross-site scripting.…
- CVE-2018-1850 - CVSS 8.8 (high), 2018-10-22: IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations when Advanced Access Control services…
- CVE-2018-1722 - CVSS 10 (critical), 2018-08-24: IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when Advanced Access Control or Federation services are running.…
