IBM Security Identity Manager 6.0.0.3
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:security_identity_manager:6.0.0.3:*:*:*:*:*:*:*
part: a version: 6.0.0.3 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Security Identity Manager (75bbbad4-593e-5c7a-b9fe-e355eeb788ee) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-2019 |
vulnerable | 2026-06-08 05:11:29.925986 |
Details available
HIGH (7.1)
IBM Security Identity Manager 6.0.0 Virtual Appliance is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 155265.
Published: 2019-01-18T17:00:00.000Z
Updated: 2024-09-17T03:12:35.893Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6110 |
vulnerable | 2026-06-08 05:05:56.367469 |
Details available
IBM Security Identity Manager 6.x before 6.0.0.3 IF14 does not properly perform logout actions, which allows remote attackers to access sessions by leveraging an unattended workstation.
Published: 2014-11-18T01:00:00.000Z
Updated: 2024-08-06T12:03:02.382Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6107 |
vulnerable | 2026-06-08 05:05:56.363163 |
Details available
IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session.
Published: 2014-11-18T01:00:00.000Z
Updated: 2024-08-06T12:03:02.344Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6106 |
vulnerable | 2026-06-08 05:05:56.360711 |
Details available
Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1, 6.0, and 7.0 allows remote attackers to hijack the authentication of users for requests that can cause cross-site scripting attacks, web cache poisoning, or other unspecified impacts via unknown vectors.
Published: 2017-09-18T15:00:00.000Z
Updated: 2024-08-06T12:03:02.359Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6105 |
vulnerable | 2026-06-08 05:05:56.352389 |
Details available
IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
Published: 2014-11-18T01:00:00.000Z
Updated: 2024-08-06T12:03:02.690Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6098 |
vulnerable | 2026-06-08 05:05:56.268233 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6096 |
vulnerable | 2026-06-08 05:05:56.265471 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6095 |
vulnerable | 2026-06-08 05:05:56.264919 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.