IBM Security Access Manager For Web Appliance vulnerabilities

8 CVEs affecting IBM Security Access Manager For Web Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-1489, published 2017-08-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-3073, published 2014-06-21. High severity, CVSS 10.0. EPSS: 4.2% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to execute arbitrary code via unknown…
CVE-2014-0963, published 2014-05-08. High severity, CVSS 7.1. EPSS: 3.1% chance of exploitation in the next 30 days. The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote…
CVE-2014-4823, published 2014-10-03. High severity, CVSS 10.0. EPSS: 2.8% chance of exploitation in the next 30 days. The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before…
CVE-2014-4809, published 2014-10-03. High severity, CVSS 7.1. EPSS: 1.5% chance of exploitation in the next 30 days. The WebSEAL component in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, when e-community SSO is enabled, allows remote attackers to cause a…
CVE-2014-3053, published 2014-06-21. High severity, CVSS 8.0. EPSS: 1.4% chance of exploitation in the next 30 days. The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware…
CVE-2014-6079, published 2014-10-03. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Local Management Interface in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security…
CVE-2017-1489, published 2017-08-29. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an…
CVE-2014-3052, published 2014-06-21. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. The reverse-proxy feature in IBM Security Access Manager (ISAM) for Web 8.0 with firmware 8.0.0.2 and 8.0.0.3 interprets the jct-nist-compliance parameter in the opposite of the intended manner,…