| CVE-2021-20582 |
IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters
|
3.7
Low
|
Sep 14, 2021 |
| CVE-2021-20569 |
IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation
|
5.3
Medium
|
Sep 14, 2021 |
| CVE-2021-20508 |
IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed…
|
2.7
Low
|
Sep 14, 2021 |
| CVE-2020-4843 |
IBM Security Secret Server 10.6 stores potentially sensitive information in config files that could be read by an…
|
6.3
Medium
|
Dec 21, 2020 |
| CVE-2020-4842 |
IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed…
|
2.7
Low
|
Dec 21, 2020 |
| CVE-2020-4841 |
IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information, caused by the failure…
|
5.9
Medium
|
Dec 21, 2020 |
| CVE-2020-4840 |
IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
|
7.4
High
|
Dec 21, 2020 |
| CVE-2020-4340 |
IBM Security Secret Server prior to 10.9 could allow an attacker to bypass SSL security due to improper certificate…
|
3.1
Low
|
Sep 23, 2020 |
| CVE-2020-4324 |
IBM Security Secret Server proir to 10.9 could allow a remote attacker to bypass security restrictions, caused by…
|
3.5
Low
|
Sep 23, 2020 |
| CVE-2020-4459 |
IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it…
|
5.9
Medium
|
Aug 4, 2020 |
| CVE-2020-4413 |
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure…
|
5.9
Medium
|
Jun 24, 2020 |
| CVE-2020-4342 |
IBM Security Secret Server 10.7 could disclose sensitive information included in installation files to an unauthorized…
|
5.3
Medium
|
Jun 24, 2020 |
| CVE-2020-4341 |
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed…
|
2.7
Low
|
Jun 24, 2020 |
| CVE-2020-4327 |
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed…
|
2.7
Low
|
Jun 24, 2020 |
| CVE-2020-4323 |
IBM Security Secret Server 10.7 is vulnerable to cross-site scripting
|
6.1
Medium
|
Jun 24, 2020 |
| CVE-2020-4322 |
IBM Security Secret Server 10.7 could allow a remote attacker to hijack the clicking action of the victim
|
4.3
Medium
|
Jun 24, 2020 |
| CVE-2019-4640 |
IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the…
|
4.4
Medium
|
Feb 19, 2020 |
| CVE-2019-4639 |
IBM Security Secret Server 10.7 uses weaker than expected cryptographic algorithms that could allow an attacker to…
|
5.9
Medium
|
Jan 28, 2020 |
| CVE-2019-4638 |
IBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies
|
3.7
Low
|
Jan 28, 2020 |
| CVE-2019-4637 |
IBM Security Secret Server 10.7 uses incomplete blacklisting for input validation which allows attackers to bypass…
|
4.3
Medium
|
Jan 28, 2020 |
| CVE-2019-4636 |
IBM Security Secret Server 10.7 could disclose sensitive information to an authenticated user from generated error…
|
2.7
Low
|
Jan 28, 2020 |
| CVE-2019-4635 |
IBM Security Secret Server 10.7 could allow a privileged user to perform unauthorized command injection due to imporoper…
|
2.7
Low
|
Jan 28, 2020 |
| CVE-2019-4633 |
IBM Security Secret Server 10.7 could allow an attacker to obtain sensitive information due to an overly permissive CORS…
|
3.1
Low
|
Jan 28, 2020 |
| CVE-2019-4632 |
IBM Security Secret Server 10.7 is vulnerable to cross-site scripting
|
6.1
Medium
|
Jan 28, 2020 |
| CVE-2019-4631 |
IBM Security Secret Server 10.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
|
7.4
High
|
Jan 28, 2020 |