| CVE-2021-20439 |
IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text…
|
7.5
High
|
Jul 15, 2021 |
| CVE-2020-4499 |
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth…
|
7.3
High
|
Oct 15, 2020 |
| CVE-2019-4552 |
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting…
|
6.1
Medium
|
Oct 15, 2020 |
| CVE-2020-4699 |
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive…
|
5.3
Medium
|
Oct 12, 2020 |
| CVE-2020-4661 |
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive…
|
5.3
Medium
|
Oct 12, 2020 |
| CVE-2020-4660 |
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive…
|
5.3
Medium
|
Oct 12, 2020 |
| CVE-2019-4036 |
IBM Security Access Manager Appliance could allow unauthenticated attacker to cause a denial of service in the reverse…
|
7.5
High
|
Oct 25, 2019 |
| CVE-2019-4153 |
IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an open…
|
6.8
Medium
|
Jun 25, 2019 |
| CVE-2019-4152 |
IBM Security Access Manager 9.0.1 through 9.0.6 does not invalidate session tokens in a timely manner
|
5.1
Medium
|
Jun 25, 2019 |
| CVE-2019-4158 |
IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the…
|
5.4
Medium
|
Jun 25, 2019 |
| CVE-2019-4157 |
IBM Security Access Manager 9.0.1 through 9.0.6 is vulnerable to cross-site scripting
|
6.1
Medium
|
Jun 25, 2019 |
| CVE-2019-4156 |
IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an…
|
5.9
Medium
|
Jun 25, 2019 |
| CVE-2019-4145 |
IBM Security Access Manager 9.0.1 through 9.0.6 could reveal highly sensitive in specialized conditions to a local…
|
7.7
High
|
Jun 25, 2019 |
| CVE-2019-4151 |
IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an…
|
5.9
Medium
|
Jun 25, 2019 |
| CVE-2019-4150 |
IBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a certificate which could…
|
3.7
Low
|
Jun 25, 2019 |
| CVE-2019-4135 |
IBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated…
|
7.5
High
|
Jun 25, 2019 |
| CVE-2017-1480 |
IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive…
|
4.3
Medium
|
Jun 6, 2018 |
| CVE-2017-1476 |
IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote…
|
5.9
Medium
|
Jun 6, 2018 |
| CVE-2017-1474 |
IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive…
|
5.3
Medium
|
Jun 6, 2018 |
| CVE-2017-1473 |
IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected…
|
Not rated
|
Apr 23, 2018 |
| CVE-2018-1443 |
An XML parsing vulnerability affects IBM SAML-based single sign-on (SSO) systems (IBM Security Access Manager 9.0.0 -…
|
5.9
Medium
|
Mar 8, 2018 |
| CVE-2017-1478 |
IBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which can be read by another user on…
|
Not rated
|
Jan 11, 2018 |
| CVE-2017-1534 |
IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using…
|
Not rated
|
Jan 10, 2018 |
| CVE-2017-1533 |
IBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting
|
Not rated
|
Jan 10, 2018 |
| CVE-2017-1459 |
IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way…
|
Not rated
|
Jan 10, 2018 |