VendorsIBMsecurity_identity_manager7.0.0.1
Vulnerabilities

IBM Security Identity Manager 7.0.0.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2016-0335
Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors. IBM X-Force ID: 111736.
Published 2018-01-12 · Modified
8.8EPSS 0.008
CVE-2016-9739
IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a local user.
Published 2017-02-01 · Modified
7.8EPSS 0.004
CVE-2016-0336
Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111737.
Published 2018-01-12 · Modified
5.4EPSS 0.006