Security Identity Manager

16 results · Clear filters · Feed

• Medium 6.8
  CVE-2021-29864

  IBM Security Identity Manager 6.0 and 6.0.2 could allow a remote attacker to conduct phishing attacks, using an open re…

  IBM Security Identity Manager
  Aug 30, 2022
• Medium 5.3
  CVE-2021-20483

  IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted…

  IBM Security Identity Manager
  Jun 16, 2021
• Medium 5.3
  CVE-2021-29688

  IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed techn…

  IBM Security Identity Manager
  May 20, 2021
• Medium 5.9
  CVE-2021-29691

  IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it …

  IBM Security Identity Manager
  May 20, 2021
• Medium 5.4
  CVE-2021-29686

  IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they …

  IBM Security Identity Manager
  May 20, 2021
• Medium 5.3
  CVE-2021-29683

  IBM Security Identity Manager 7.0.2 stores user credentials in plain clear text which can be read by an authenticated u…

  IBM Security Identity Manager
  May 20, 2021
• Medium 5.3
  CVE-2021-29682

  IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed techn…

  IBM Security Identity Manager
  May 20, 2021
• Medium 6.8
  CVE-2019-4675

  IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it …

  IBM Security Identity Manager
  Feb 4, 2020
• Medium 6.8
  CVE-2019-4674

  IBM Security Identity Manager 7.0.1 could allow a remote attacker to traverse directories on the system. An attacker co…

  IBM Security Identity Manager
  Feb 4, 2020
• Medium 5.4
  CVE-2019-4451

  IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb…

  IBM Security Identity Manager
  Feb 4, 2020
• Medium 5.3
  CVE-2018-1968

  IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users. The information can be used …

  IBM Security Identity Manager
  Jul 11, 2019
• Medium 4.0
  CVE-2018-1962

  IBM Security Identity Manager 7.0.1 Virtual Appliance does not invalidate session tokens when the logout button is pres…

  IBM Security Identity Manager
  Feb 4, 2019
• Medium 5.1
  CVE-2018-1959

  IBM Security Identity Manager 7.0.1 Virtual Appliance contains hard-coded credentials, such as a password or cryptograp…

  IBM Security Identity Manager
  Jan 24, 2019
• Medium 5.9
  CVE-2018-1956

  IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes it…

  IBM Security Identity Manager
  Jan 14, 2019
• Medium 6.1
  CVE-2018-1967

  IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb…

  IBM Security Identity Manager
  Jan 14, 2019
• Medium 4.4
  CVE-2017-1405

  IBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other updates without sufficie…

  IBM Security Identity Manager
  Jun 8, 2018