Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.1.4:*:*:*:*:*:*:*

part: a version: 7.0.1.4 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Identity Manager Virtual Appliance (d31b3e58-d06e-5d66-9c93-d9beeae36a59)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9704 vulnerable 2026-06-08 05:08:24.323025 Details available
IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:59:03.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9703 vulnerable 2026-06-08 05:08:24.322234 Details available
IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:59:03.334Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.