Security Access Manager For Enterprise Single Sign On

5 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-4513 HIGH This Week

IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XXE IBM Security Access Manager For Enterprise Single Sign On

NVD

CVSS 3.1

8.2

EPSS

2.8%

CVE-2015-0235 CRITICAL POC PATCH THREAT Act Now

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.7%.

Memory Corruption Buffer Overflow RCE Glibc Communications Application Session Controller +16

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

86.7%

Threat

6.1

CVE-2013-5420 LOW Monitor

The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation IBM Security Access Manager For Enterprise Single Sign On

NVD

CVSS 2.0

3.5

EPSS

0.2%

CVE-2013-6745 LOW Monitor

Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote authenticated users to inject. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.

IBM XSS Security Access Manager For Enterprise Single Sign On

NVD

CVSS 2.0

3.5

EPSS

0.2%

CVE-2013-5421 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote attackers to inject arbitrary web. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

IBM XSS Security Access Manager For Enterprise Single Sign On

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2019-4513

EPSS 3% CVSS 8.2

HIGH This Week

XXE IBM Security Access Manager For Enterprise Single Sign On

NVD

CVE-2015-0235

EPSS 87% 6.1 CVSS 10.0

CRITICAL POC PATCH THREAT Act Now

Memory Corruption Buffer Overflow RCE +18

NVD Exploit-DB

CVE-2013-5420

EPSS 0% CVSS 3.5

LOW Monitor

Privilege Escalation IBM Security Access Manager For Enterprise Single Sign On

NVD

CVE-2013-6745

EPSS 0% CVSS 3.5

LOW Monitor

IBM XSS Security Access Manager For Enterprise Single Sign On

NVD

CVE-2013-5421

EPSS 0% CVSS 4.3

MEDIUM This Month

IBM XSS Security Access Manager For Enterprise Single Sign On

NVD