Security Access Manager For Web
Vendor:
First CVE: Dec 17, 2013 · Active for 12 years
20
Total CVEs
More Total CVEs than 95% of tracked products
3.3
Avg CVEs / Year
Higher CVE frequency than 84% of tracked products
5.6
Avg CVSS
Higher Avg CVSS than 19% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Security Access Manager For Web over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 17, 2013
12 years ago
Most Recent CVE
Jun 6, 2018
2,973 days ago
CVE Severity & Scoring
Security Access Manager For Web20 CVEs
80%
10%
All CVEs352,785 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network7 (35.0%)
Unknown13 (65.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (25.0%)
High2 (10.0%)
Unknown13 (65.0%)
User Interaction
None5 (25.0%)
Unknown13 (65.0%)
Required2 (10.0%)
Privileges Required
Low1 (5.0%)
High1 (5.0%)
None5 (25.0%)
Unknown13 (65.0%)
Top CVEs
Signals from CVEs in this product scope (20 CVEs).
20 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-3028CRITICAL IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitra | Nov 25, 2016 | 9.1 | 30 | NO | NO |
CVE-2017-1476MEDIUM IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure t | Jun 6, 2018 | 5.9 | 22 | NO | NO |
CVE-2016-3018MEDIUM IBM Security Access Manager for Web is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intend | Feb 1, 2017 | 6.1 | 22 | NO | NO |
CVE-2014-6080MEDIUM SQL injection vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allows remote | Dec 18, 2014 | 6.5 | 21 | NO | NO |
CVE-2014-6077MEDIUM Cross-site request forgery (CSRF) vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before | Dec 18, 2014 | 6.8 | 21 | NO | NO |
CVE-2013-6329HIGH IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted handshak | Dec 17, 2013 | 7.8 | 21 | NO | NO |
CVE-2017-1474MEDIUM IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to | Jun 6, 2018 | 5.3 | 20 | NO | NO |
CVE-2017-1489MEDIUM IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not | Aug 29, 2017 | 6.1 | 20 | NO | NO |
CVE-2015-4963HIGH IBM Security Access Manager for Web 7.x before 7.0.0.16 and 8.x before 8.0.1.3 mishandles WebSEAL HTTPTransformation requests, which allows remote attackers to read or write to arb | Nov 8, 2015 | 7.5 | 20 | NO | NO |
CVE-2014-6088MEDIUM IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to obtain sensitive in | Dec 18, 2014 | 5.0 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (20 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (20 CVEs).
Media Mentions
Signals from CVEs in this product scope (20 CVEs).
Top CNAs Publishing CVEs For Security Access Manager For Web
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.0.1.6 | 1 | 6.1 | 1.2% | 0 | 0 |
| 8.0.1.5 | 1 | 6.1 | 1.2% | 0 | 0 |
| 8.0.1.4 | 4 | 6.3 | 1.6% | 0 | 0 |
| 8.0.1.3 | 4 | 6.3 | 1.6% | 0 | 0 |
| 8.0.1.2 | 5 | 6.5 | 1.9% | 0 | 0 |
| 8.0.1.1 | 3 | 5.8 | 1.8% | 0 | 0 |
| 8.0.1.0 | 3 | 6.6 | 1.8% | 0 | 0 |
| 8.0.1 | 2 | 6.4 | 2.2% | 0 | 0 |
| 8.0.0.5 | 4 | 7.2 | 2.2% | 0 | 0 |
| 8.0.0.4 | 3 | 7.6 | 2.7% | 0 | 0 |
| 8.0.0.31 | 2 | 6.8 | 2.2% | 0 | 0 |
| 8.0.0.3 | 3 | 6.6 | 1.8% | 0 | 0 |
| 8.0.0.22 | 2 | 6.8 | 2.2% | 0 | 0 |
| 8.0.0.2 | 4 | 7.2 | 2.2% | 0 | 0 |
| 8.0.0.1 | 2 | 6.1 | 1.0% | 0 | 0 |
| 8.0.0.0 | 2 | 6.1 | 1.0% | 0 | 0 |
| 8.0.0 | 2 | 6.4 | 2.2% | 0 | 0 |
| 8.0 | 13 | 5.3 | 1.4% | 0 | 0 |
| 7.0.0.9 | 1 | 7.5 | 3.3% | 0 | 0 |
| 7.0.0.8 | 1 | 7.5 | 3.3% | 0 | 0 |