AM
Product
Access Manager
16
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 9Low 3
Watch
Add Access Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2908 | 9.1 | Feb 1 | IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML… Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +10 more |
| CVE-2016-3029 | 8.8 | Feb 1 | IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user… Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +10 more |
| CVE-2016-5919 | 7.5 | Feb 16 | IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +11 more |
| CVE-2016-3017 | 7.5 | Feb 1 | IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +10 more |
| CVE-2016-3027 | 6.5 | Feb 1 | IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +10 more |
| CVE-2016-3022 | 6.5 | Feb 1 | IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorrect file permissions Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +10 more |
| CVE-2016-3018 | 6.1 | Feb 1 | IBM Security Access Manager for Web is vulnerable to cross-site scripting Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +10 more |
| CVE-2016-3043 | 5.9 | Feb 1 | IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +10 more |
| CVE-2015-5013 | 5.5 | Feb 8 | The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +11 more |
| CVE-2016-3020 | 5.5 | Feb 7 | IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +11 more |
| CVE-2016-3023 | 5.3 | Feb 1 | IBM Security Access Manager for Web could allow an unauthenticated user to gain access to sensitive information by entering invalid file names Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +10 more |
| CVE-2016-3016 | 4.4 | Feb 1 | IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an… Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +10 more |
| CVE-2016-3024 | 4.0 | Feb 1 | IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the system Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +10 more |
| CVE-2016-3045 | 3.7 | Feb 1 | IBM Security Access Manager for Web stores sensitive information in URL parameters Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +10 more |
| CVE-2016-3046 | 2.7 | Feb 1 | IBM Security Access Manager for Web is vulnerable to SQL injection Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +10 more |
| CVE-2016-3021 | 2.7 | Feb 1 | IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a specially crafted HTTP request Affected: 9.0; 9.0.0.1; 9.0.1; 7.0.0; 8.0.0; 8.0.0.1; +10 more |
Showing 16