Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm security identity manager virtual appliance 7.0.1.0 vulnerabilities and exploits

(subscribe to this query)
801
VMScore
CVE-2016-0324
IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 up to and including 7.0.1.0 prior to 7.0.1-ISS-SIM-FP0001 allows remote authenticated users to execute arbitrary code with administrator privileges via unspecified vectors. IBM X-Force ID: 111640.
Ibm Security Identity Manager Virtual Appliance 7.0.0.2Ibm Security Identity Manager Virtual Appliance 7.0.0.3Ibm Security Identity Manager Virtual Appliance 7.0.1.0Ibm Security Identity Manager Virtual Appliance 7.0.0.0Ibm Security Identity Manager Virtual Appliance 7.0.0.1
409
VMScore
CVE-2016-0327
IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 up to and including 7.0.1.0 prior to 7.0.1-ISS-SIM-FP0001 allows local users to gain administrator privileges via unspecified vectors. IBM X-Force ID: 111643.
Ibm Security Identity Manager Virtual Appliance 7.0.1.0Ibm Security Identity Manager Virtual Appliance 7.0.0.1Ibm Security Identity Manager Virtual Appliance 7.0.0.3Ibm Security Identity Manager Virtual Appliance 7.0.0.0Ibm Security Identity Manager Virtual Appliance 7.0.0.2
445
VMScore
CVE-2016-0332
IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 up to and including 7.0.1.0 prior to 7.0.1-ISS-SIM-FP0001 do not properly restrict failed login attempts, which makes it easier for remote malicious users to obtain access via a brute-force approach. IBM X-Force ID: 1...
Ibm Security Identity Manager Virtual Appliance 7.0.0.0Ibm Security Identity Manager Virtual Appliance 7.0.0.1Ibm Security Identity Manager Virtual Appliance 7.0.0.2Ibm Security Identity Manager Virtual Appliance 7.0.0.3Ibm Security Identity Manager Virtual Appliance 7.0.1.0
356
VMScore
CVE-2016-0367
IBM Security Identity Manager Virtual Appliance 7.0.x prior to 7.0.1.3-ISS-SIM-IF0001 allows remote authenticated users to obtain sensitive information by reading an error message. IBM X-Force ID: 112072.
Ibm Security Identity Manager Virtual Appliance 7.0.1.1Ibm Security Identity Manager Virtual Appliance 7.0.1.3Ibm Security Identity Manager Virtual Appliance 7.0.0.2Ibm Security Identity Manager Virtual Appliance 7.0.1.0Ibm Security Identity Manager Virtual Appliance 7.0.0.0Ibm Security Identity Manager Virtual Appliance 7.0.0.1Ibm Security Identity Manager Virtual Appliance 7.0.0.3
383
VMScore
CVE-2016-0351
IBM Security Identity Manager Virtual Appliance 7.0.x prior to 7.0.1.3-ISS-SIM-IF0001 does not set the secure flag for the session cookie in an HTTPS session, which makes it easier for remote malicious users to capture this cookie by intercepting its transmission within an HTTP s...
Ibm Security Identity Manager Virtual Appliance 7.0.0.0Ibm Security Identity Manager Virtual Appliance 7.0.0.2Ibm Security Identity Manager Virtual Appliance 7.0.1.0Ibm Security Identity Manager Virtual Appliance 7.0.1.1Ibm Security Identity Manager Virtual Appliance 7.0.1.3Ibm Security Identity Manager Virtual Appliance 7.0.0.1Ibm Security Identity Manager Virtual Appliance 7.0.0.3
383
VMScore
CVE-2016-9704
IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ibm Security Identity Manager Virtual Appliance 7.0.1.3Ibm Security Identity Manager Virtual Appliance 7.0.1.2Ibm Security Identity Manager Virtual Appliance 7.0.1.4Ibm Security Identity Manager Virtual Appliance 7.0.0.0Ibm Security Identity Manager Virtual Appliance 7.0.1.1Ibm Security Identity Manager Virtual Appliance 7.0.1.0Ibm Security Identity Manager Virtual Appliance 7.0.0.3Ibm Security Identity Manager Virtual Appliance 7.0.0.2Ibm Security Identity Manager Virtual Appliance 7.0.0.1
187
VMScore
CVE-2016-9703
IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information.
Ibm Security Identity Manager Virtual Appliance 7.0.1.3Ibm Security Identity Manager Virtual Appliance 7.0.1.2Ibm Security Identity Manager Virtual Appliance 7.0.1.1Ibm Security Identity Manager Virtual Appliance 7.0.1.0Ibm Security Identity Manager Virtual Appliance 7.0.0.3Ibm Security Identity Manager Virtual Appliance 7.0.0.2Ibm Security Identity Manager Virtual Appliance 7.0.1.4Ibm Security Identity Manager Virtual Appliance 7.0.0.1Ibm Security Identity Manager Virtual Appliance 7.0.0.0
312
VMScore
CVE-2016-0336
Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 up to and including 7.0.1.0 prior to 7.0.1-ISS-SIM-FP0001 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 1...
Ibm Security Identity Manager 7.0.0.0Ibm Security Identity Manager 7.0.0.1Ibm Security Identity Manager 7.0.0.3Ibm Security Identity Manager 7.0.0.2Ibm Security Identity Manager 7.0.1.0
605
VMScore
CVE-2016-0335
Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 up to and including 7.0.1.0 prior to 7.0.1-ISS-SIM-FP0001 allows remote malicious users to hijack the authentication of users for requests that have unspecified impac...
Ibm Security Identity Manager 7.0.1.0Ibm Security Identity Manager 7.0.0.0Ibm Security Identity Manager 7.0.0.2Ibm Security Identity Manager 7.0.0.1Ibm Security Identity Manager 7.0.0.3
187
VMScore
CVE-2016-9739
IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a local user.
Ibm Security Identity Manager 7.0.0.0Ibm Security Identity Manager 7.0.1.3Ibm Security Identity Manager 7.0.0.2Ibm Security Identity Manager 7.0.0.3Ibm Security Identity Manager 7.0.1.0Ibm Security Identity Manager 7.0.1.1Ibm Security Identity Manager 7.0.0.1Ibm Security Identity Manager 7.0.1.2Ibm Security Identity Manager 7.0.1.4
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook