Security Identity Manager at a glance
- Last 12 months
- 0
- Critical · all time
- 1
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Latest advisories
-
Medium max 5.9
IBM Java: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Java ausnutzen, um Informationen offenzulegen.
first Feb 24, 2022 -
High max 8.1
Grub2: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
Ein Angreifer kann mehrere Schwachstellen in Oracle Linux ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
first Jun 7, 2022 -
Medium max 7.5
Apache Commons und Apache Tomcat: Schwachstelle ermöglicht Denial of Service
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Commons und Apache Tomcat ausnutzen, um einen Denial of Service Angriff durchzuführen.
first Feb 20, 2023 -
Medium max 7.5
OpenSSL: Schwachstelle ermöglicht Denial of Service
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSL ausnutzen, um einen Denial of Service Angriff durchzuführen.
first Mar 15, 2022 -
Medium max 6.2
IBM DB2: Mehrere Schwachstellen
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.
first Feb 8, 2023
28 results · Feed
-
Medium 6.8
IBM Security Identity Manager 6.0 and 6.0.2 could allow a remote attacker to conduct phishing attacks, using an open re…
-
High 7.5
IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users …
-
Medium 5.3
IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted…
-
Low 3.1
IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failur…
-
Medium 5.3
IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed techn…
-
Medium 5.9
IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it …
-
Low 3.7
IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses f…
-
Medium 5.4
IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they …
-
Medium 5.3
IBM Security Identity Manager 7.0.2 stores user credentials in plain clear text which can be read by an authenticated u…
-
Medium 5.3
IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed techn…
-
Medium 6.8
IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it …
-
Medium 6.8
IBM Security Identity Manager 7.0.1 could allow a remote attacker to traverse directories on the system. An attacker co…
-
Medium 5.4
IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb…
-
High 8.0
IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by th…
-
Medium 5.3
IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users. The information can be used …
-
Medium 4.0
IBM Security Identity Manager 7.0.1 Virtual Appliance does not invalidate session tokens when the logout button is pres…
-
High 7.1
IBM Security Identity Manager 7.0.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML d…
-
High 7.2
IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the a…
-
Medium 5.1
IBM Security Identity Manager 7.0.1 Virtual Appliance contains hard-coded credentials, such as a password or cryptograp…
-
High 7.1
IBM Security Identity Manager 6.0.0 Virtual Appliance is vulnerable to a XML External Entity Injection (XXE) attack whe…
-
Critical 9.0
IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be auto…
-
Medium 5.9
IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes it…
-
Medium 6.1
IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb…
-
High 8.8
IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dan…
-
Medium 4.4
IBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other updates without sufficie…
-
Unscored —
IBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a critical resource or …
-
Unscored —
IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbi…
-
Unscored —
IBM Security Identity Manager Adapters 6.0 and 7.0 stores user credentials in plain in clear text which can be read by …