IBM Security Identity Manager Adapter vulnerabilities

9 CVEs affecting IBM Security Identity Manager Adapter, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-20574, published 2021-06-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-20574, published 2021-06-28. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. IBM Security Identity Manager Adapters 6.0 and 7.0 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this…
CVE-2021-20573, published 2021-06-28. Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days. IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow the and cause the…
CVE-2021-20572, published 2021-06-28. Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days. IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow the and cause…
CVE-2016-0357, published 2016-07-15. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows remote attackers to conduct clickjacking attacks via a crafted web site.
CVE-2016-0339, published 2016-07-15. Medium severity, CVSS 5.6. EPSS: 1.3% chance of exploitation in the next 30 days. IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to…
CVE-2016-0330, published 2016-07-15. High severity, CVSS 7.3. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, which makes it easier for remote attackers to obtain access by…
CVE-2021-20494, published 2021-06-28. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap based buffer overflow, caused by improper bounds. An authenticared user could overflow the buffer and cause the service to…
CVE-2016-0340, published 2016-07-15. High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by…
CVE-2016-0338, published 2016-07-15. Medium severity, CVSS 6.2. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows local users to discover cleartext passwords by (1) reading a configuration file or…