IBM Tivoli Federated Identity Manager Business Gateway vulnerabilities

10 CVEs affecting IBM Tivoli Federated Identity Manager Business Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-5431, published 2013-11-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-3315, published 2012-11-08. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. The Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM) through 6.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) before 6.2.2 do not require…
CVE-2011-3137, published 2011-08-12. High severity, CVSS 10.0. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before…
CVE-2011-3138, published 2011-08-12. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The LTPA STS module support implementation in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9…
CVE-2011-3135, published 2011-08-12. High severity, CVSS 10.0. EPSS: 1.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Runtime in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has…
CVE-2011-3136, published 2011-08-12. High severity, CVSS 10.0. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before…
CVE-2013-5431, published 2013-11-01. Medium severity, CVSS 5.8. EPSS: 1.4% chance of exploitation in the next 30 days. Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway…
CVE-2011-1386, published 2012-01-04. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not properly handle signature validations based on SAML 1.0,…
CVE-2013-0582, published 2013-05-02. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.12, 6.2.1 before 6.2.1.5, and 6.2.2 before 6.2.2.4 and Tivoli Federated Identity Manager…
CVE-2012-6359, published 2013-01-18. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.11, 6.2.1 before 6.2.1.3, and 6.2.2 before 6.2.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before…
CVE-2012-3314, published 2012-10-02. Medium severity, CVSS 5.8. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, 6.2.1, and 6.2.2 allow remote attackers to establish sessions via a crafted…