IBM Security Access Manager For Mobile Appliance vulnerabilities

4 CVEs affecting IBM Security Access Manager For Mobile Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-6079, published 2014-10-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-3073, published 2014-06-21. High severity, CVSS 10.0. EPSS: 4.2% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to execute arbitrary code via unknown…
CVE-2014-4823, published 2014-10-03. High severity, CVSS 10.0. EPSS: 2.8% chance of exploitation in the next 30 days. The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before…
CVE-2014-3053, published 2014-06-21. High severity, CVSS 8.0. EPSS: 1.4% chance of exploitation in the next 30 days. The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware…
CVE-2014-6079, published 2014-10-03. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Local Management Interface in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security…