CVE-2017-1480: IBM Security Access Manager

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617.

Affected products

• IBM Security Access Manager: from 9.0.0, up to and including 9.0.3.1
• IBM Security Access Manager For Mobile: from 8.0.0, up to and including 8.0.1.6
• IBM Security Access Manager For Web: from 8.0.0, up to and including 8.0.1.6

Published 2018-06-06. Last modified 2026-06-17.