Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm security access manager vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2014-6086
IBM Security Access Manager for Mobile 8.x prior to 8.0.1 and Security Access Manager for Web 7.x prior to 7.0.0 FP10 and 8.x prior to 8.0.1 do not ensure that HTTPS is used, which allows remote malicious users to obtain sensitive information by sniffing the network during an HTT...
Ibm Security Access Manager For Mobile 8.0
Ibm Security Access Manager For Web 8.0
Ibm Security Access Manager For Web 7.0
7.1
CVSSv2
CVE-2014-0963
The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 prior to 7.0.0-ISS-SAM-IF0006 and 8.0 prior to 8.0.0.3-ISS-WGA-IF0002 allows remote malicious users to cause a denial of service (infinite loop) via crafted SSL mess...
Ibm Security Access Manager For Web Appliance 7.0
Ibm Security Access Manager For Web Software 8.0
Ibm Security Access Manager For Web Appliance 8.0
Ibm Security Access Manager For Web Software 7.0
1 Github repository
7.8
CVSSv2
CVE-2013-6329
IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote malicious users to cause a denial of service via a crafted handshake during resumption of an SSLv2 session.
Ibm Security Access Manager For Web 6.1
Ibm Content Manager Ondemand For Multiplatforms 8.5
Ibm Security Access Manager For Web 6.0
Ibm Global Security Kit -
Ibm Security Access Manager For Web 7.0
Ibm Content Manager Ondemand For Multiplatforms 9.0
Ibm Security Access Manager For Web 6.1.1
7.5
CVSSv2
CVE-2020-4499
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authentication checks and gain access to applications. IBM X-Force ID: 182216.
Ibm Security Verify Access
Ibm Security Access Manager
5.8
CVSSv2
CVE-2019-4552
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This ...
Ibm Security Verify Access
Ibm Security Access Manager
5
CVSSv2
CVE-2021-20439
IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user.
Ibm Security Verify Access 10.0.0
Ibm Security Access Manager 9.0
2.9
CVSSv2
CVE-2020-4660
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an malicious user to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186140.
Ibm Security Access Manager 9.0.7.0
Ibm Security Verify Access 10.0.0
2.9
CVSSv2
CVE-2020-4661
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an malicious user to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186142.
Ibm Security Access Manager 9.0.7.0
Ibm Security Verify Access 10.0.0
2.9
CVSSv2
CVE-2020-4699
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an malicious user to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186947.
Ibm Security Access Manager 9.0.7.0
Ibm Security Verify Access 10.0.0
3.3
CVSSv2
CVE-2014-3052
The reverse-proxy feature in IBM Security Access Manager (ISAM) for Web 8.0 with firmware 8.0.0.2 and 8.0.0.3 interprets the jct-nist-compliance parameter in the opposite of the intended manner, which makes it easier for remote malicious users to obtain sensitive information by l...
Ibm Security Access Manager For Web 8.0 Firmware 8.0.0.2
Ibm Security Access Manager For Web 8.0 Firmware 8.0.0.3
Ibm Security Access Manager For Web Appliance 8.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
logic flaw
CVE-2024-23692
CVE-2024-26229
CVE-2024-35255
CVE-2024-5835
CVE-2024-5837
XML external entity
dos
CVE-2024-5813
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »