Aller au contenu

Vulnérabilités connues pour IBM Security Access Manager

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2021-20439 IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text… 7.5 Élevée 15 juil. 2021
CVE-2020-4499 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth… 7.3 Élevée 15 oct. 2020
CVE-2019-4552 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting… 6.1 Moyenne 15 oct. 2020
CVE-2020-4699 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive… 5.3 Moyenne 12 oct. 2020
CVE-2020-4661 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive… 5.3 Moyenne 12 oct. 2020
CVE-2020-4660 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive… 5.3 Moyenne 12 oct. 2020
CVE-2019-4036 IBM Security Access Manager Appliance could allow unauthenticated attacker to cause a denial of service in the reverse… 7.5 Élevée 25 oct. 2019
CVE-2019-4153 IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an open… 6.8 Moyenne 25 juin 2019
CVE-2019-4152 IBM Security Access Manager 9.0.1 through 9.0.6 does not invalidate session tokens in a timely manner 5.1 Moyenne 25 juin 2019
CVE-2019-4158 IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the… 5.4 Moyenne 25 juin 2019
CVE-2019-4157 IBM Security Access Manager 9.0.1 through 9.0.6 is vulnerable to cross-site scripting 6.1 Moyenne 25 juin 2019
CVE-2019-4156 IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an… 5.9 Moyenne 25 juin 2019
CVE-2019-4145 IBM Security Access Manager 9.0.1 through 9.0.6 could reveal highly sensitive in specialized conditions to a local… 7.7 Élevée 25 juin 2019
CVE-2019-4151 IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an… 5.9 Moyenne 25 juin 2019
CVE-2019-4150 IBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a certificate which could… 3.7 Faible 25 juin 2019
CVE-2019-4135 IBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated… 7.5 Élevée 25 juin 2019
CVE-2017-1480 IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive… 4.3 Moyenne 6 juin 2018
CVE-2017-1476 IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote… 5.9 Moyenne 6 juin 2018
CVE-2017-1474 IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive… 5.3 Moyenne 6 juin 2018
CVE-2017-1473 IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected… Non notée 23 avr. 2018
CVE-2018-1443 An XML parsing vulnerability affects IBM SAML-based single sign-on (SSO) systems (IBM Security Access Manager 9.0.0 -… 5.9 Moyenne 8 mars 2018
CVE-2017-1478 IBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which can be read by another user on… Non notée 11 janv. 2018
CVE-2017-1534 IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using… Non notée 10 janv. 2018
CVE-2017-1533 IBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting Non notée 10 janv. 2018
CVE-2017-1459 IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way… Non notée 10 janv. 2018

Autres produits IBM