Vulnerabilities > IBM > Security Access Manager > High

DATE CVE VULNERABILITY TITLE RISK
2020-10-15 CVE-2020-4499 Missing Authorization vulnerability in IBM Security Access Manager and Security Verify Access
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authentication checks and gain access to applications.
network
low complexity
ibm CWE-862
7.5
2019-06-25 CVE-2019-4145 Unspecified vulnerability in IBM Security Access Manager
IBM Security Access Manager 9.0.1 through 9.0.6 could reveal highly sensitive in specialized conditions to a local user which could be used in further attacks against the system.
local
low complexity
ibm
7.1
2019-06-25 CVE-2019-4135 Unspecified vulnerability in IBM Security Access Manager
IBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated users to impersonate other users.
network
low complexity
ibm
8.8
2018-10-22 CVE-2018-1850 Unspecified vulnerability in IBM Security Access Manager 9.0.3.1/9.0.4.0/9.0.5.0
IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations when Advanced Access Control services are running.
network
ibm
8.5