Skip to content

Known vulnerabilities in IBM Security Identity Governance and Intelligence

Is your version affected?

CVE Summary Score Published
CVE-2020-4970 IBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain… 5.3 Medium May 19, 2022
CVE-2020-4957 IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that… 5.3 Medium May 17, 2022
CVE-2020-4996 IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the… 6.5 Medium Feb 9, 2021
CVE-2020-4995 IBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout which could allow a… 4.0 Medium Feb 9, 2021
CVE-2020-4795 IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information to an unauthorized user… 5.3 Medium Feb 9, 2021
CVE-2020-4791 IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain sensitive information using… 6.9 Medium Feb 9, 2021
CVE-2020-4790 IBM Security Identity Governance and Intelligence 5.2.6 could allow a user to cause a denial of service due to… 5.3 Medium Feb 9, 2021
CVE-2020-4969 IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information,… 2.6 Low Jan 21, 2021
CVE-2020-4968 IBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could… 5.3 Medium Jan 21, 2021
CVE-2020-4966 IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or… 4.3 Medium Jan 21, 2021
CVE-2020-4958 IBM Security Identity Governance and Intelligence 5.2.6 does not perform any authentication for functionality that… 7.4 High Jan 21, 2021
CVE-2020-4243 IBM Security Identity Governance and Intelligence 5.2.6 Virtual Appliance could allow a remote attacker to obtain… 3.7 Low Aug 5, 2020
CVE-2020-4248 IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information… 2.7 Low May 28, 2020
CVE-2020-4249 IBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive information to other… 6.5 Medium May 28, 2020
CVE-2020-4246 IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack… 7.1 High May 28, 2020
CVE-2020-4245 IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by… 5.9 Medium May 28, 2020
CVE-2020-4244 IBM Security Identity Governance and Intelligence 5.2.6 could allow an unauthorized user to obtain sensitive information… 5.3 Medium May 28, 2020
CVE-2020-4233 IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information,… 3.7 Low May 28, 2020
CVE-2020-4232 IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid… 5.3 Medium May 28, 2020
CVE-2020-4231 IBM Security Identity Governance and Intelligence 5.2.6 could allow an authenticated user to perform unauthorized… 4.3 Medium May 28, 2020
CVE-2018-1945 IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance could allow a remote attacker to… 6.1 Medium Feb 21, 2019
CVE-2018-1944 IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance contains hard-coded credentials,… 5.1 Medium Feb 21, 2019
CVE-2018-1950 IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance generates an error message… 4.3 Medium Feb 21, 2019
CVE-2018-1949 IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance discloses sensitive… 4.3 Medium Feb 21, 2019
CVE-2018-1948 IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance does not set the secure… 4.3 Medium Feb 21, 2019

Other IBM products