SA
Product
Security Access Manager For Web 8.0 Firmware
On CISA KEVExploited in the wild
27
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 10Low 2
Watch
Add Security Access Manager For Web 8.0 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3029 | 8.8 | Feb 1 | IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user… Affected: 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1.0; 8.0.1.2; +2 more |
| CVE-2015-5018 | 8.0 | Jan 2 | IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute… Affected: 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1; 8.0.1.0; +2 more |
| CVE-2016-5919 | 7.5 | Feb 16 | IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: All versions, or not specified |
| CVE-2016-3017 | 7.5 | Feb 1 | IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations Affected: 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1.0; 8.0.1.2; +2 more |
| CVE-2015-5012 | 7.5 | Feb 15 | The SSH implementation on IBM Security Access Manager for Web appliances 7.0 before 7.0.0 FP19, 8.0 before 8.0.1.3 IF3, and 9.0 before 9.0.0.0 IF1 does not properly restrict the… Affected: 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1; 8.0.1.0; +1 more |
| CVE-2015-5010 | 7.5 | Feb 15 | IBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before 9.0.0.1 IF1 does not have a lockout mechanism for invalid login attempts, which… Affected: 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1; 8.0.1.0; +2 more |
Showing 6