| CVE-2021-29864 |
IBM Security Identity Manager 6.0 and 6.0.2 could allow a remote attacker to conduct phishing attacks, using an open…
|
6.8
Moyenne
|
30 août 2022 |
| CVE-2021-20488 |
IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users…
|
7.5
Élevée
|
16 juin 2021 |
| CVE-2021-20483 |
IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF)
|
5.3
Moyenne
|
16 juin 2021 |
| CVE-2021-29692 |
IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure…
|
3.1
Faible
|
20 mai 2021 |
| CVE-2021-29691 |
IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it…
|
5.9
Moyenne
|
20 mai 2021 |
| CVE-2021-29688 |
IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed…
|
5.3
Moyenne
|
20 mai 2021 |
| CVE-2021-29687 |
IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses…
|
3.7
Faible
|
20 mai 2021 |
| CVE-2021-29686 |
IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they…
|
5.4
Moyenne
|
20 mai 2021 |
| CVE-2021-29683 |
IBM Security Identity Manager 7.0.2 stores user credentials in plain clear text which can be read by an authenticated…
|
5.3
Moyenne
|
20 mai 2021 |
| CVE-2021-29682 |
IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed…
|
5.3
Moyenne
|
20 mai 2021 |
| CVE-2019-4674 |
IBM Security Identity Manager 7.0.1 could allow a remote attacker to traverse directories on the system
|
6.8
Moyenne
|
4 févr. 2020 |
| CVE-2019-4675 |
IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it…
|
6.8
Moyenne
|
4 févr. 2020 |
| CVE-2019-4451 |
IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
4 févr. 2020 |
| CVE-2019-4561 |
IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the…
|
8.0
Élevée
|
20 nov. 2019 |
| CVE-2018-1968 |
IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users
|
5.3
Moyenne
|
11 juil. 2019 |
| CVE-2019-4038 |
IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the…
|
7.2
Élevée
|
4 févr. 2019 |
| CVE-2018-1970 |
IBM Security Identity Manager 7.0.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML…
|
7.1
Élevée
|
4 févr. 2019 |
| CVE-2018-1962 |
IBM Security Identity Manager 7.0.1 Virtual Appliance does not invalidate session tokens when the logout button is…
|
4.0
Moyenne
|
4 févr. 2019 |
| CVE-2018-1959 |
IBM Security Identity Manager 7.0.1 Virtual Appliance contains hard-coded credentials, such as a password or…
|
5.1
Moyenne
|
24 janv. 2019 |
| CVE-2018-2019 |
IBM Security Identity Manager 6.0.0 Virtual Appliance is vulnerable to a XML External Entity Injection (XXE) attack when…
|
7.1
Élevée
|
18 janv. 2019 |
| CVE-2018-1956 |
IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes…
|
5.9
Moyenne
|
14 janv. 2019 |
| CVE-2018-1969 |
IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be…
|
9.0
Critique
|
14 janv. 2019 |
| CVE-2018-1967 |
IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting
|
6.1
Moyenne
|
14 janv. 2019 |
| CVE-2018-1453 |
IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of…
|
8.8
Élevée
|
8 juin 2018 |
| CVE-2017-1405 |
IBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other updates without…
|
4.4
Moyenne
|
8 juin 2018 |