Approved changes feed: RSS · Atom

cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Access Manager For Web 8.0 Firmware (5dd1ded7-c580-5fbb-8ef1-1a19ecdc2e54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1459 vulnerable 2026-06-08 05:09:22.217456 Details available
IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 128378.
Published: 2018-01-10T17:00:00.000Z
Updated: 2024-09-17T00:07:01.089Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5919 vulnerable 2026-06-08 05:07:58.084857 Details available
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM Reference #: 1996868.
Published: 2017-02-16T20:00:00.000Z
Updated: 2024-08-06T01:15:10.197Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3046 vulnerable 2026-06-08 05:07:44.142305 Details available
IBM Security Access Manager for Web is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements which could allow the attacker to view information in the back-end database.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-05T23:40:15.139Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3043 vulnerable 2026-06-08 05:07:44.133729 Details available
IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-05T23:40:15.129Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3020 vulnerable 2026-06-08 05:07:44.073556 Details available
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to bypass validation and load a page with malicious content.
Published: 2017-02-07T16:00:00.000Z
Updated: 2024-08-05T23:40:14.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5013 vulnerable 2026-06-08 05:06:48.566503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.