Security Identity Manager Virtual Appliance

DATE	CVE	VULNERABILITY TITLE	RISK
2017-02-01	CVE-2016-9704	Cross-site Scripting vulnerability in IBM Security Identity Manager Virtual Appliance IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. network low complexity ibm CWE-79	6.1
2017-02-01	CVE-2016-9703	Session Fixation vulnerability in IBM Security Identity Manager Virtual Appliance IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information. low complexity ibm CWE-384	2.4