Advisories · Technology

IBM Security Access Manager.

Every CVE that names IBM Security Access Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-20439 CVE record

CVSS 7.5 High

IBM Security Verify Access Docker: IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user…
- IBM Security Verify Access Docker
- IBM Security Access Manager
Not analysed yet 15 Jul 2021
CVE-2020-4499 CVE record

CVSS 7.3 High

IBM Security Verify Access: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an…
- IBM Security Verify Access
- IBM Security Access Manager
Not analysed yet 15 Oct 2020
CVE-2019-4552 CVE record

CVSS 6.1 Medium

IBM Security Verify Access: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to…
- IBM Security Verify Access
- IBM Security Access Manager
Not analysed yet 15 Oct 2020
CVE-2020-4699 CVE record

CVSS 5.3 Medium

IBM Security Access Manager: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an…
- IBM Security Access Manager
- IBM Security Verify Access
Not analysed yet 12 Oct 2020
CVE-2020-4661 CVE record

CVSS 5.3 Medium

IBM Security Access Manager: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an…
- IBM Security Access Manager
- IBM Security Verify Access
Not analysed yet 12 Oct 2020
CVE-2020-4660 CVE record

CVSS 5.3 Medium

IBM Security Access Manager: IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an…
- IBM Security Access Manager
- IBM Security Verify Access
Not analysed yet 12 Oct 2020
CVE-2019-4036 CVE record

CVSS 7.5 High

IBM Security Access Manager: IBM Security Access Manager Appliance could allow unauthenticated attacker to cause a…
- IBM Security Access Manager
Not analysed yet 25 Oct 2019
CVE-2019-4158 CVE record

CVSS 5.4 Medium

IBM Security Access Manager: IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is…
- IBM Security Access Manager
Not analysed yet 25 Jun 2019
CVE-2019-4157 CVE record

CVSS 6.1 Medium

IBM Security Access Manager 9.0.1 through 9.0.6 is vulnerable to cross-site scripting.
- IBM Security Access Manager
Not analysed yet 25 Jun 2019
CVE-2019-4156 CVE record

CVSS 5.9 Medium

IBM Security Access Manager: IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic…
- IBM Security Access Manager
Not analysed yet 25 Jun 2019
CVE-2019-4153 CVE record

CVSS 6.8 Medium

IBM Security Access Manager: IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct…
- IBM Security Access Manager
Not analysed yet 25 Jun 2019
CVE-2019-4152 CVE record

CVSS 5.1 Medium

IBM Security Access Manager: IBM Security Access Manager 9.0.1 through 9.0.6 does not invalidate session tokens in a…
- IBM Security Access Manager
Not analysed yet 25 Jun 2019
CVE-2019-4151 CVE record

CVSS 5.9 Medium

IBM Security Access Manager: IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic…
- IBM Security Access Manager
Not analysed yet 25 Jun 2019
CVE-2019-4150 CVE record

CVSS 3.7 Low

IBM Security Access Manager: IBM Security Access Manager 9.0.1 through 9.0.6 does not validate…
- IBM Security Access Manager
Not analysed yet 25 Jun 2019
CVE-2019-4145 CVE record

CVSS 7.7 High

IBM Security Access Manager: IBM Security Access Manager 9.0.1 through 9.0.6 could reveal highly sensitive in…
- IBM Security Access Manager
Not analysed yet 25 Jun 2019
CVE-2019-4135 CVE record

CVSS 7.5 High

IBM Security Access Manager: IBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability…
- IBM Security Access Manager
Not analysed yet 25 Jun 2019
CVE-2017-1480 CVE record

CVSS 4.3 Medium

IBM Security Access Manager: IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6…
- IBM Security Access Manager
Not analysed yet 6 Jun 2018
CVE-2017-1476 CVE record

CVSS 5.9 Medium

IBM Security Access Manager: IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6…
- IBM Security Access Manager
Not analysed yet 6 Jun 2018
CVE-2017-1474 CVE record

CVSS 5.3 Medium

IBM Security Access Manager: IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6…
- IBM Security Access Manager
Not analysed yet 6 Jun 2018
CVE-2017-1473 CVE record

IBM Security Access Manager: IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1…
- IBM Security Access Manager
Not analysed yet 23 Apr 2018
CVE-2018-1443 CVE record

CVSS 5.9 Medium

IBM Security Access Manager: An XML parsing vulnerability affects IBM SAML-based single sign-on (SSO) systems (IBM…
- IBM Security Access Manager
- IBM Tivoli Federated Identity Manager
Not analysed yet 8 Mar 2018
CVE-2017-1478 CVE record

IBM Security Access Manager: IBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which…
- IBM Security Access Manager
Not analysed yet 11 Jan 2018
CVE-2017-1534 CVE record

IBM Security Access Manager: IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to…
- IBM Security Access Manager
Not analysed yet 10 Jan 2018
CVE-2017-1533 CVE record

IBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting.
- IBM Security Access Manager
Not analysed yet 10 Jan 2018
CVE-2017-1459 CVE record

IBM Security Access Manager: IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a…
- IBM Security Access Manager
Not analysed yet 10 Jan 2018
CVE-2017-1477 CVE record

IBM Security Access Manager: IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity…
- IBM Security Access Manager
Not analysed yet 13 Nov 2017
CVE-2017-1453 CVE record

IBM Security Access Manager: IBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker…
- IBM Security Access Manager
Not analysed yet 13 Nov 2017
CVE-2016-3051 CVE record

IBM Security Access Manager: IBM Security Access Manager for Web 9.0.0 could allow an authenticated user to access…
- IBM Security Access Manager
Not analysed yet 7 Jun 2017
CVE-2016-3019 CVE record

IBM Security Access Manager: IBM Security Access Manager for Web 9.0.0 uses weaker than expected cryptographic…
- IBM Security Access Manager
Not analysed yet 7 Jun 2017