Vulnerabilities > IBM > Security Access Manager FOR Enterprise Single Sign ON

DATE CVE VULNERABILITY TITLE RISK
2019-08-26 CVE-2019-4513 XXE vulnerability in IBM Security Access Manager for Enterprise Single Sign-On 8.2.2
IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.
network
low complexity
ibm CWE-611
8.2
8.2
2018-08-17 CVE-2017-1732 Information Exposure vulnerability in IBM Security Access Manager for Enterprise Single Sign-On 8.2.2
IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 does not set the secure attribute on authorization tokens or session cookies.
network
low complexity
ibm CWE-200
5.3
5.3