CVE-2018-1722: IBM Security Access Manager

Critical severity, CVSS 10.0. EPSS: 9% chance of exploitation in the next 30 days.

IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when Advanced Access Control or Federation services are running. IBM X-Force ID: 147370.

Affected products

• IBM Security Access Manager: version 9.0.4.0 only; version 9.0.5.0 only

Published 2018-08-24. Last modified 2026-06-17.