Ibm Security Access Manager For Enterprise Single Sign-on — known CVE vulnerabilities

Every CVE whose affected-product data names Ibm Security Access Manager For Enterprise Single Sign-on, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2015-0235 — CVSS 10.0 (critical): Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows…
• CVE-2019-4513 — CVSS 8.2 (high): IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when…
• CVE-2013-5421 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM…
• CVE-2017-1732 — CVSS 4.3 (medium): IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 does not set the secure attribute on authorization tokens or session…
• CVE-2013-5420 — CVSS 3.5 (low): The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote authenticated users…
• CVE-2013-6745 — CVSS 3.5 (low): Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM…