CVE-2017-1473: IBM Security Access Manager Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 128605.

Affected products

• IBM Security Access Manager Firmware: version 9.0.0 only; version 9.0.0.1 only; version 9.0.1.0 only; version 9.0.2.0 only; version 9.0.2.1 only; version 9.0.3 only; …
• IBM Security Access Manager For Mobile: version 8.0.0 only; version 8.0.0.1 only; version 8.0.0.2 only; version 8.0.0.3 only; version 8.0.0.4 only; version 8.0.0.5 only; …
• IBM Security Access Manager For Web Firmware: version 8.0.0 only; version 8.0.0.1 only; version 8.0.0.2 only; version 8.0.0.3 only; version 8.0.0.4 only; version 8.0.0.5 only; …

Published 2018-04-23. Last modified 2026-06-17.