Security Privileged Identity Manager Virtual Appliance (Ibm) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2016-09-26. Vendor: Ibm.

CVEs of Security Privileged Identity Manager Virtual Appliance

• CVE-2016-5974 - CVSS 5.4 (medium), 2016-09-26: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows…
• CVE-2016-5972 - CVSS 6.8 (medium), 2016-09-26: IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 uses weak permissions for unspecified resources, which allows remote…
• CVE-2016-5971 - CVSS 7.1 (high), 2016-09-26: IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authenticated users to read arbitrary files or cause a…
• CVE-2016-5970 - CVSS 6.5 (medium), 2016-09-26: Directory traversal vulnerability in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authenticated users…
• CVE-2016-5963 - CVSS 8.8 (high), 2016-09-26: IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 does not properly validate updates, which allows remote authenticated…
• CVE-2016-5957 - CVSS 7.5 (high), 2016-09-26: IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote attackers to defeat cryptographic protection mechanisms…
• CVE-2016-3040 - CVSS 6.8 (medium), 2016-09-26: IBM WebSphere Application Server (WAS) Liberty, as used in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8, allows…