Security Identity Manager Virtual Appliance (Ibm) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2020-07-01. Vendor: Ibm.
CVEs of Security Identity Manager Virtual Appliance
- CVE-2019-4705 - CVSS 2.7 (low), 2020-07-01: IBM Security Identity Manager Virtual Appliance 7.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further…
- CVE-2019-4704 - CVSS 4.3 (medium), 2020-07-01: IBM Security Identity Manager Virtual Appliance 7.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to…
- CVE-2019-4676 - CVSS 7.8 (high), 2020-07-01: IBM Security Identity Manager Virtual Appliance 7.0.2 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 171512.
- CVE-2019-4706 - CVSS 2.7 (low), 2020-07-01: IBM Security Identity Manager Virtual Appliance 7.0.2 writes information to log files which can be of a sensitive nature and give valuable guidance to an…
- CVE-2018-1968 - CVSS 5.3 (medium), 2019-07-11: IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system.…
- CVE-2016-0351 - CVSS 3.7 (low), 2018-02-21: IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 does not set the secure flag for the session cookie in an HTTPS session,…
- CVE-2016-0367 - CVSS 4.3 (medium), 2018-02-21: IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 allows remote authenticated users to obtain sensitive information by…
- CVE-2016-0332 - CVSS 9.8 (critical), 2018-01-12: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 do not properly restrict failed login attempts,…
- CVE-2016-0327 - CVSS 7.8 (high), 2018-01-12: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows local users to gain administrator privileges…
- CVE-2016-0324 - CVSS 8.8 (high), 2018-01-12: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote authenticated users to execute…
- CVE-2016-9704 - CVSS 6.1 (medium), 2017-02-01: IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
- CVE-2016-9703 - CVSS 2.4 (low), 2017-02-01: IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work…
