IBM Security Access Manager For Web Software vulnerabilities

4 CVEs affecting IBM Security Access Manager For Web Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-1489, published 2017-08-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-3073, published 2014-06-21. High severity, CVSS 10.0. EPSS: 4.2% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to execute arbitrary code via unknown…
CVE-2014-0963, published 2014-05-08. High severity, CVSS 7.1. EPSS: 3.1% chance of exploitation in the next 30 days. The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote…
CVE-2014-3053, published 2014-06-21. High severity, CVSS 8.0. EPSS: 1.4% chance of exploitation in the next 30 days. The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware…
CVE-2017-1489, published 2017-08-29. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an…