Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_access_manager_for_web:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Access Manager For Web (328520a4-cfed-57ad-a15c-95871f1eb61d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1489 vulnerable 2026-06-08 05:09:22.335952 Details available
IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.
Published: 2017-08-28T20:00:00.000Z
Updated: 2024-09-16T23:31:41.216Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1480 vulnerable 2026-06-08 05:09:22.308913 Details available
MEDIUM (4.3)
IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617.
Published: 2018-06-06T17:00:00.000Z
Updated: 2024-09-16T23:30:56.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1476 vulnerable 2026-06-08 05:09:22.301472 Details available
MEDIUM (5.9)
IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 128610.
Published: 2018-06-06T17:00:00.000Z
Updated: 2024-09-16T23:01:51.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1474 vulnerable 2026-06-08 05:09:22.300905 Details available
MEDIUM (5.3)
IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.
Published: 2018-06-06T17:00:00.000Z
Updated: 2024-09-17T01:06:25.459Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.