Vulnerabilities > IBM > Security Identity Manager > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-02-04 CVE-2019-4675 Use of Hard-coded Credentials vulnerability in IBM Security Identity Manager 7.0.1
IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
network
low complexity
ibm CWE-798
critical
9.8
2019-01-14 CVE-2018-1969 Unrestricted Upload of File with Dangerous Type vulnerability in IBM Security Identity Manager
IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.
network
low complexity
ibm CWE-434
critical
9.9