CVE-2016-5919

all versions

IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an

7.5HIGH

CVE-2016-3020

all versions

IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused

5.5MEDIUM

CVE-2016-3043

all versions

IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to proper

5.9MEDIUM

CVE-2016-3023

all versions

IBM Security Access Manager for Web could allow an unauthenticated user to gain access to sensitive information by entering invali

5.3MEDIUM

CVE-2016-3022

all versions

IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorr

6.5MEDIUM

CVE-2016-3021

all versions

IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using

2.7LOW

CVE-2016-3017

all versions

IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfiguration

7.5HIGH

CVE-2016-3016

all versions

IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin a

4.4MEDIUM

CVE-2015-5012

all versions

The SSH implementation on IBM Security Access Manager for Web appliances 7.0 before 7.0.0 FP19, 8.0 before 8.0.1.3 IF3, and 9.0 be

7.5HIGH

CVE-2015-5010

all versions

IBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before 9.0.0.1 IF1 does not have a lock

7.5HIGH

CVE-2015-5018

all versions

IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 I

8.0HIGH

CVE-2015-1892

<= 7.0.0.11

The Multicast DNS (mDNS) responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadverte

CVE-2014-6079

all versions

Cross-site scripting (XSS) vulnerability in the Local Management Interface in IBM Security Access Manager for Web 7.x before 7.0.0

CVE-2014-4823

all versions

The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0

CVE-2014-4809

all versions

The WebSEAL component in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005,

CVE-2014-7169

all versions

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environme

9.8CRITICAL

CVE-2014-6271

all versions

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows re

9.8CRITICAL