Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_identity_manager:7.0.1:*:*:*:*:*:*:*

part: a version: 7.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Identity Manager (75bbbad4-593e-5c7a-b9fe-e355eeb788ee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-4675 vulnerable 2026-06-08 05:13:57.402087 Details available
MEDIUM (6.8)
IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 171511.
Published: 2020-02-04T16:45:37.764Z
Updated: 2024-09-16T16:28:34.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4674 vulnerable 2026-06-08 05:13:57.399601 Details available
MEDIUM (6.8)
IBM Security Identity Manager 7.0.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 171510.
Published: 2020-02-04T16:45:37.277Z
Updated: 2024-09-17T01:16:01.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1453 vulnerable 2026-06-08 05:11:18.232561 Details available
HIGH (8.8)
IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dangerous types that can be automatically processed within the environment. IBM X-Force ID: 140055.
Published: 2018-06-08T13:00:00.000Z
Updated: 2024-09-16T16:48:32.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1405 vulnerable 2026-06-08 05:09:22.030085 Details available
MEDIUM (4.4)
IBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code. IBM X-Force ID: 127392.
Published: 2018-06-08T13:00:00.000Z
Updated: 2024-09-16T20:12:27.229Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.