Skip to content

Known vulnerabilities in IBM Security Privileged Identity Manager

Is your version affected?

CVE Summary Score Published
CVE-2018-1680 IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have strong… 5.9 Medium Apr 2, 2019
CVE-2018-1640 IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker to… 8.8 High Apr 2, 2019
CVE-2018-1626 IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not renew a session variable after a successful… 3.1 Low Apr 2, 2019
CVE-2018-1625 IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that includes sensitive… 4.3 Medium Apr 2, 2019
CVE-2018-1623 IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which can be read… 4.0 Medium Apr 2, 2019
CVE-2018-1622 IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is vulnerable to cross-site request forgery which could… 4.3 Medium Apr 2, 2019
CVE-2018-1618 IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories… 7.7 High Apr 2, 2019
CVE-2017-1705 IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments 4.3 Medium Mar 30, 2018
CVE-2016-5960 IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores user credentials in plain in clear text which can be… Not rated Jun 7, 2017
CVE-2016-5959 IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters Not rated Jun 7, 2017

Other IBM products