CVE-2021-29687: IBM Security Identity Manager

Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days.

IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 200018

Affected products

• IBM Security Identity Manager: version 6.0.2 only

Published 2021-05-20. Last modified 2026-06-17.