Known vulnerabilities in IBM Corporation Access Manager
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2016-5919 | IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that… | Not rated | Feb 16, 2017 |
| CVE-2015-5013 | The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which… | Not rated | Feb 8, 2017 |
| CVE-2016-3020 | IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security… | Not rated | Feb 7, 2017 |
| CVE-2016-3045 | IBM Security Access Manager for Web stores sensitive information in URL parameters | Not rated | Feb 1, 2017 |
| CVE-2016-3043 | IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure… | Not rated | Feb 1, 2017 |
| CVE-2016-3022 | IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due… | Not rated | Feb 1, 2017 |
| CVE-2016-3021 | IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error… | Not rated | Feb 1, 2017 |
| CVE-2016-3029 | IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute… | Not rated | Feb 1, 2017 |
| CVE-2016-3018 | IBM Security Access Manager for Web is vulnerable to cross-site scripting | Not rated | Feb 1, 2017 |
| CVE-2016-3046 | IBM Security Access Manager for Web is vulnerable to SQL injection | Not rated | Feb 1, 2017 |
| CVE-2016-3017 | IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security… | Not rated | Feb 1, 2017 |
| CVE-2016-3027 | IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection… | Not rated | Feb 1, 2017 |
| CVE-2016-3016 | IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying… | Not rated | Feb 1, 2017 |
| CVE-2016-3024 | IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the… | Not rated | Feb 1, 2017 |
| CVE-2016-3023 | IBM Security Access Manager for Web could allow an unauthenticated user to gain access to sensitive information by… | Not rated | Feb 1, 2017 |
| CVE-2016-2908 | IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external… | Not rated | Feb 1, 2017 |
Other IBM Corporation products
Kenexa LMS on Cloud 21
Rational Collaborative Lifecycle Management 17
QRadar SIEM 13
Key Lifecycle Manager 12
Kenexa LCMS Premier on Cloud 11
BigFix Inventory 8
WebSphere MQ 8
UrbanCode Deploy 7
BigFix Platform 7
TRIRIGA Application Platform 6
InfoSphere Information Server 6
Jazz Reporting Service 6