Skip to content

Known vulnerabilities in IBM Security Access Manager Appliance

Is your version affected?

CVE Summary Score Published
CVE-2020-4395 IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an… 6.3 Medium Oct 14, 2020
CVE-2019-4725 IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting 6.1 Medium Oct 6, 2020
CVE-2020-4461 IBM Security Access Manager Appliance 9.0.7.1 could allow an authenticated user to bypass security by allowing… 6.5 Medium May 20, 2020
CVE-2019-4707 IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when… 7.1 High Jan 28, 2020
CVE-2018-1887 IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 contains hard-coded credentials,… 5.9 Medium Dec 13, 2018
CVE-2018-1803 IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 could allow a remote attacker to… 6.1 Medium Dec 13, 2018
CVE-2018-1886 IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 discloses sensitive information to… 5.3 Medium Dec 13, 2018
CVE-2018-1815 IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 for Enterprise Single-Sign On is… 6.1 Medium Dec 13, 2018
CVE-2018-1814 IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses weaker than expected… 5.9 Medium Dec 13, 2018
CVE-2018-1813 IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for… 4.3 Medium Dec 13, 2018
CVE-2018-1805 IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 generates an error message that… 4.3 Medium Dec 13, 2018
CVE-2018-1804 IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 does not set the secure… 3.7 Low Dec 13, 2018
CVE-2018-1740 IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site… 5.4 Medium Dec 13, 2018
CVE-2018-1653 IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site… 5.4 Medium Dec 13, 2018
CVE-2018-1850 IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations… 8.8 High Oct 22, 2018
CVE-2018-1722 IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when Advanced Access Control… 10.0 Critical Aug 24, 2018

Other IBM products