CVE-2014-6078: IBM Security Access Manager For Mobile

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not have a lockout period after invalid login attempts, which makes it easier for remote attackers to obtain admin access via a brute-force attack.

Affected products

• IBM Security Access Manager For Mobile: version 8.0 only
• IBM Security Access Manager For Web: version 7.0 only; version 8.0 only

Published 2014-12-18. Last modified 2026-06-17.