IBM Security Identity Manager (ISIM) 6.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:security_identity_manager:6.0.0:*:*:*:*:*:*:*
part: a version: 6.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Security Identity Manager (75bbbad4-593e-5c7a-b9fe-e355eeb788ee) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-29864 |
vulnerable | 2026-06-08 05:31:27.143110 |
Details available
MEDIUM (6.8)
IBM Security Identity Manager 6.0 and 6.0.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 206089
Published: 2022-08-30T18:40:09.653Z
Updated: 2024-09-17T02:15:34.065Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4561 |
vulnerable | 2026-06-08 05:13:57.303448 |
Details available
HIGH (8)
IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 166456.
Published: 2019-11-20T16:16:11.703Z
Updated: 2024-09-16T19:46:20.489Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2019 |
vulnerable | 2026-06-08 05:11:29.922350 |
Details available
HIGH (7.1)
IBM Security Identity Manager 6.0.0 Virtual Appliance is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 155265.
Published: 2019-01-18T17:00:00.000Z
Updated: 2024-09-17T03:12:35.893Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0961 |
vulnerable | 2026-06-08 05:05:15.253254 |
Details available
Cross-site request forgery (CSRF) vulnerability in IBM Tivoli Identity Manager (ITIM) 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Security Identity Manager (ISIM) 6.0 before 6.0.0.2 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Published: 2014-06-08T18:00:00.000Z
Updated: 2024-08-06T09:34:40.314Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.