| CVE-2021-29864 |
IBM Security Identity Manager 6.0 and 6.0.2 could allow a remote attacker to conduct phishing attacks, using an open…
|
6.8
Medium
|
Aug 30, 2022 |
| CVE-2021-20488 |
IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users…
|
7.5
High
|
Jun 16, 2021 |
| CVE-2021-20483 |
IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF)
|
5.3
Medium
|
Jun 16, 2021 |
| CVE-2021-29692 |
IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure…
|
3.1
Low
|
May 20, 2021 |
| CVE-2021-29691 |
IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it…
|
5.9
Medium
|
May 20, 2021 |
| CVE-2021-29688 |
IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed…
|
5.3
Medium
|
May 20, 2021 |
| CVE-2021-29687 |
IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses…
|
3.7
Low
|
May 20, 2021 |
| CVE-2021-29686 |
IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they…
|
5.4
Medium
|
May 20, 2021 |
| CVE-2021-29683 |
IBM Security Identity Manager 7.0.2 stores user credentials in plain clear text which can be read by an authenticated…
|
5.3
Medium
|
May 20, 2021 |
| CVE-2021-29682 |
IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed…
|
5.3
Medium
|
May 20, 2021 |
| CVE-2019-4674 |
IBM Security Identity Manager 7.0.1 could allow a remote attacker to traverse directories on the system
|
6.8
Medium
|
Feb 4, 2020 |
| CVE-2019-4675 |
IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it…
|
6.8
Medium
|
Feb 4, 2020 |
| CVE-2019-4451 |
IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Feb 4, 2020 |
| CVE-2019-4561 |
IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the…
|
8.0
High
|
Nov 20, 2019 |
| CVE-2018-1968 |
IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users
|
5.3
Medium
|
Jul 11, 2019 |
| CVE-2019-4038 |
IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the…
|
7.2
High
|
Feb 4, 2019 |
| CVE-2018-1970 |
IBM Security Identity Manager 7.0.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML…
|
7.1
High
|
Feb 4, 2019 |
| CVE-2018-1962 |
IBM Security Identity Manager 7.0.1 Virtual Appliance does not invalidate session tokens when the logout button is…
|
4.0
Medium
|
Feb 4, 2019 |
| CVE-2018-1959 |
IBM Security Identity Manager 7.0.1 Virtual Appliance contains hard-coded credentials, such as a password or…
|
5.1
Medium
|
Jan 24, 2019 |
| CVE-2018-2019 |
IBM Security Identity Manager 6.0.0 Virtual Appliance is vulnerable to a XML External Entity Injection (XXE) attack when…
|
7.1
High
|
Jan 18, 2019 |
| CVE-2018-1956 |
IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes…
|
5.9
Medium
|
Jan 14, 2019 |
| CVE-2018-1969 |
IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be…
|
9.0
Critical
|
Jan 14, 2019 |
| CVE-2018-1967 |
IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting
|
6.1
Medium
|
Jan 14, 2019 |
| CVE-2018-1453 |
IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of…
|
8.8
High
|
Jun 8, 2018 |
| CVE-2017-1405 |
IBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other updates without…
|
4.4
Medium
|
Jun 8, 2018 |