CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-1813
https://notcve.org/view.php?id=CVE-2018-1813
13 Dec 2018 — IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 150017. IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0 y 9.0.5.0 emplea listas negras incompletas para validar entradas, lo que permite que los atacantes omitan los controles de la aplicación, lo que provoca un impacto ... • http://www.ibm.com/support/docview.wss?uid=ibm10787785 •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2018-1850
https://notcve.org/view.php?id=CVE-2018-1850
22 Oct 2018 — IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations when Advanced Access Control services are running. IBM X-Force ID: 150998. IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 y 9.0.5.0 podría permitir operaciones de administración no autorizadas cuando se está ejecutando el servicio Advanced Access Control. IBM X-Force ID: 150998. • http://www.ibm.com/support/docview.wss?uid=ibm10734555 •
CVSS: 10.0EPSS: 35%CPEs: 2EXPL: 0CVE-2018-1722
https://notcve.org/view.php?id=CVE-2018-1722
24 Aug 2018 — IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when Advanced Access Control or Federation services are running. IBM X-Force ID: 147370. IBM Security Access Manager Appliance 9.0.4.0 y 9.0.5.0 podría permitir la ejecución remota de código cuando se están ejecutando los servicios Advanced Access Control o Federation. IBM X-Force ID: 147370. • http://www.securityfocus.com/bid/105145 •