IBM Tivoli Access Manager For E-Business vulnerabilities

8 CVEs affecting IBM Tivoli Access Manager For E-Business, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-1489, published 2017-08-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-0513, published 2006-02-06. Medium severity, CVSS 5.0. EPSS: 9.5% chance of exploitation in the next 30 days. Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager (TAM) 5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the…
CVE-2010-4120, published 2010-10-28. Medium severity, CVSS 4.3. EPSS: 2.9% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web…
CVE-2010-4622, published 2010-12-30. Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e…
CVE-2011-0494, published 2011-01-19. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006,…
CVE-2004-2558, published 2004-12-31. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration…
CVE-2008-5257, published 2008-11-27. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. webseald in WebSEAL 6.0.0.17 in IBM Tivoli Access Manager for e-business allows remote attackers to cause a denial of service (crash or hang) via HTTP requests, as demonstrated by a McAfee…
CVE-2017-1489, published 2017-08-29. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an…
CVE-2010-4623, published 2010-12-30. Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days. WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service (worker thread consumption) via shift-reload…