Approved changes feed: RSS · Atom

cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Access Manager For Web 7.0 Firmware (853051f4-1afa-56d7-b814-979ce9a323d3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-5919 vulnerable 2026-06-08 05:07:58.083778 Details available
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM Reference #: 1996868.
Published: 2017-02-16T20:00:00.000Z
Updated: 2024-08-06T01:15:10.197Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3043 vulnerable 2026-06-08 05:07:44.133684 Details available
IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-05T23:40:15.129Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3020 vulnerable 2026-06-08 05:07:44.072642 Details available
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to bypass validation and load a page with malicious content.
Published: 2017-02-07T16:00:00.000Z
Updated: 2024-08-05T23:40:14.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1892 vulnerable 2026-06-08 05:06:26.614830 Details available
The Multicast DNS (mDNS) responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets.
Published: 2015-04-01T01:00:00.000Z
Updated: 2024-08-06T04:54:16.530Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.