Overview 272 matches · 0 in Waratek scope · 0 protected · 7 exploited · 5 CISA KEV · 19 public PoC · 9 EPSS ≥ 0.5
272matches
0in Waratek scope0.0%
0protected0.0%
7exploited2.6%
5CISA KEV1.8%
19public PoC7.0%
9EPSS ≥ 0.53.3%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
272
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
272
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 45 / year
20001
Not applicable1
High1
not blocked1
Working exploit published1
20010
20020
20030
20041
Not applicable1
High1
not blocked1
No public exploit1
20051
Not applicable1
Medium1
not blocked1
No public exploit1
20062
Not applicable2
High1
Medium1
not blocked2
Working exploit published1
No public exploit1
20075
Not applicable5
High2
Medium2
Low1
not blocked5
Working exploit published1
No public exploit4
20085
Not applicable5
High2
Medium2
Low1
not blocked5
No public exploit5
20098
Not applicable8
High2
Medium3
Low3
not blocked8
Working exploit published1
No public exploit7
20108
Not applicable8
High1
Medium7
not blocked8
Working exploit published1
No public exploit7
20116
Not applicable6
High3
Medium3
not blocked6
Working exploit published1
No public exploit5
20121
Not applicable1
Medium1
not blocked1
No public exploit1
20135
Not applicable5
High2
Medium1
Low2
not blocked5
No public exploit5
201427
Not applicable27
Critical2
High5
Medium19
Low1
not blocked27
Exploited2
Working exploit published2
No public exploit23
20152
Not applicable2
High1
Medium1
not blocked2
No public exploit2
20166
Not applicable6
Critical1
High4
Medium1
not blocked6
No public exploit6
201734
Not applicable34
Critical2
High9
Medium19
Low4
not blocked34
No public exploit34
201845
Not applicable45
Critical8
High9
Medium26
Low2
not blocked45
Working exploit published3
No public exploit42
201923
Not applicable23
Critical2
High13
Medium7
Low1
not blocked23
Working exploit published1
Proof of concept only1
No public exploit21
202019
Not applicable19
Critical2
High5
Medium12
not blocked19
No public exploit19
202113
Not applicable13
Critical1
High6
Medium6
not blocked13
Exploited1
No public exploit12
20228
Not applicable8
Critical5
Medium3
not blocked8
Exploited2
Forecast only3
No public exploit3
20238
Not applicable8
Critical2
High2
Medium4
not blocked8
Exploited1
Proof of concept only2
Forecast only1
No public exploit4
202420
Not applicable20
Critical1
High12
Medium7
not blocked20
Exploited1
No public exploit19
202517
Not applicable17
High1
Medium8
Low8
not blocked17
No public exploit17
20267
Not applicable7
Critical1
High5
Medium1
not blocked7
No public exploit7
200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-11878 | High | 2026-06-24 | Not applicable | No public exploit | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS). This issue affects Access Manager: from 5.1 through 5.1.2. |
| CVE-2026-11877 | Medium | 2026-06-24 | Not applicable | No public exploit | An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3. |
| CVE-2026-9863 | High | 2026-06-15 | Not applicable | No public exploit | Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be able to cause commands to be executed on the BoKS Master during client version handling. |
| CVE-2026-9862 | Critical | 2026-06-15 | Not applicable | No public exploit | Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the service during the autoregistration processing. |
| CVE-2026-45169 | High | 2026-06-12 | Not applicable | No public exploit | Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8 exhibit a validation vulnerability. Under specific circumstances and configuration scenarios, processing unexpected input could potentially lead to an unexpected service termination, resulting in a localized denial of service (DoS). CyberArk Security Bulletin: CA26-17 |
| CVE-2025-59106 | High | 2026-01-26 | Not applicable | No public exploit | The binary serving the web server and executing basically all actions launched from the Web UI is running with root privileges. This is against the least privilege principle. If an attacker is able to execute code on the system via other vulnerabilities it is possible to directly execute commands with highest privileges. |
| CVE-2025-11669 | High | 2026-01-13 | Not applicable | No public exploit | Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue in the initiate remote session functionality. |
| CVE-2024-54840 | Medium | 2025-02-03 | Not applicable | No public exploit | PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection. |
| CVE-2023-42250 | Medium | 2025-01-13 | Not applicable | No public exploit | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.php. |
| CVE-2023-42249 | Medium | 2025-01-13 | Not applicable | No public exploit | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php. |
| CVE-2023-42248 | Medium | 2025-01-13 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can write arbitrary files by manipulating POST parameters of the page "common/vam_Sql.php". |
| CVE-2023-42247 | Medium | 2025-01-13 | Not applicable | No public exploit | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.php. |
| CVE-2023-42246 | Medium | 2025-01-13 | Not applicable | No public exploit | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam/vam_ep.php. |
| CVE-2023-42245 | Medium | 2025-01-13 | Not applicable | No public exploit | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_scheduledfile.php. |
| CVE-2023-42244 | High | 2025-01-13 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_visits.php. |
| CVE-2023-42243 | Medium | 2025-01-13 | Not applicable | No public exploit | In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/vam_Sql.php, which allows for arbitrary SQL queries. |
| CVE-2023-42242 | Low | 2025-01-13 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /monitor/s_terminal.php. |
| CVE-2023-42241 | Low | 2025-01-13 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_anagraphic.php. |
| CVE-2023-42240 | Low | 2025-01-13 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /monitor/s_scheduledfile.php. |
| CVE-2023-42239 | Low | 2025-01-13 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_ep.php. |
| CVE-2023-42238 | Low | 2025-01-13 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_eps.php. |
| CVE-2023-42237 | Low | 2025-01-13 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple GET parameters of /vam/vam_i_command.php. |
| CVE-2023-42236 | Low | 2025-01-13 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /common/ajaxfunction.php. |
| CVE-2023-42235 | Low | 2025-01-13 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple parameters of /monitor/s_normalizedtrans.php. |
| CVE-2019-25213 | Critical | 2024-10-16 | Not applicable | Exploited | The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive files such as wp-config.php |
| CVE-2024-4556 | High | 2024-08-28 | Not applicable | No public exploit | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1. |
| CVE-2024-4555 | High | 2024-08-28 | Not applicable | No public exploit | Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1 |
| CVE-2024-4554 | High | 2024-08-28 | Not applicable | No public exploit | Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects Access Manager before 5.0.4.1 and 5.1. |
| CVE-2020-11847 | High | 2024-08-21 | Not applicable | No public exploit | SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1. |
| CVE-2020-11846 | High | 2024-08-21 | Not applicable | No public exploit | A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1. |
| CVE-2024-35139 | Medium | 2024-06-28 | Not applicable | No public exploit | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from the container due to incorrect default permissions. IBM X-Force ID: 292415. |
| CVE-2024-35137 | Medium | 2024-06-28 | Not applicable | No public exploit | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 292413. |
| CVE-2023-38371 | High | 2024-06-27 | Not applicable | No public exploit | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 261198. |
| CVE-2023-38370 | High | 2024-06-27 | Not applicable | No public exploit | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1, under certain configurations, could allow a user on the network to install malicious packages. IBM X-Force ID: 261197. |
| CVE-2023-38368 | Medium | 2024-06-27 | Not applicable | No public exploit | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could disclose sensitive information to a local user to do improper permission controls. IBM X-Force ID: 261195. |
| CVE-2023-30998 | High | 2024-06-27 | Not applicable | No public exploit | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254649. |
| CVE-2023-30997 | High | 2024-06-27 | Not applicable | No public exploit | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254638. |
| CVE-2020-11843 | Medium | 2024-06-11 | Not applicable | No public exploit | This allows the information exposure to unauthorized users. This issue affects NetIQ Access Manager using version 4.5 or before |
| CVE-2024-29127 | High | 2024-03-19 | Not applicable | No public exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager allows Reflected XSS.This issue affects Advanced Access Manager: from n/a through 6.9.20. |
| CVE-2023-50811 | Medium | 2024-03-19 | Not applicable | No public exploit | An issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the “computer” POST parameter related to the ID of a specific reception by POST HTTP request interception. Iterating that parameter, it has been possible to access to the application and take control of many other receptions in addition the assigned one. |
| CVE-2023-38369 | High | 2024-02-07 | Not applicable | No public exploit | IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker images should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 261196. |
| CVE-2023-31002 | Medium | 2024-02-07 | Not applicable | No public exploit | IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254657. |
| CVE-2023-51674 | Medium | 2024-02-01 | Not applicable | No public exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More: from n/a through 6.9.18. |
| CVE-2023-49961 | High | 2024-01-08 | Not applicable | No public exploit | WALLIX Bastion 7.x, 8.x, 9.x and 10.x and WALLIX Access Manager 3.x and 4.x have Incorrect Access Control which can lead to sensitive data exposure. |
| CVE-2023-51675 | Medium | 2023-12-29 | Not applicable | No public exploit | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More: from n/a through 6.9.18. |
| CVE-2023-50881 | Medium | 2023-12-29 | Not applicable | No public exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More: from n/a through 6.9.15. |
| CVE-2023-6105 | Medium | 2023-11-15 | Not applicable | No public exploit | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database. |
| CVE-2022-1601 | Medium | 2023-08-30 | Not applicable | Proof of concept only | The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible for attackers to access restricted content in certain situations. |
| CVE-2023-2291 | High | 2023-04-26 | Not applicable | Proof of concept only | Static credentials exist in the PostgreSQL data used in ManageEngine Access Manager Plus (AMP) build 4309, ManageEngine Password Manager Pro, and ManageEngine PAM360. These credentials could allow a malicious actor to modify configuration data that would escalate their permissions from that of a low-privileged user to an Administrative user. |
| CVE-2023-23592 | High | 2023-02-09 | Not applicable | No public exploit | WALLIX Access Manager 3.x through 4.0.x allows a remote attacker to access sensitive information. |
| CVE-2022-47966 | Critical | 2023-01-18 | Not applicable | Exploited | Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and the ManageEngine applications did not provide those protections. This affects Access Manager Plus before 4308, Active Directory 360 before 4310, ADAudit Plus before 7081, ADManager Plus before 7162, ADSelfService Plus before 6211, Analytics Plus before 5150, Application Control Plus before 10.1.2220.18, Asset Explorer before 6983, Browser Security Plus before 11.1.2238.6, Device Control Plus before 10.1.2220.18, Endpoint Central before 10.1.2228.11, Endpoint Central MSP before 10.1.2228.11, Endpoint DLP before 10.1.2137.6, Key Manager Plus before 6401, OS Deployer before 1.1.2243.1, PAM 360 before 5713, Password Manager Pro before 12124, Patch Manager Plus before 10.1.2220.18, Remote Access Plus before 10.1.2228.11, Remote Monitoring and Management (RMM) before 10.1.41. ServiceDesk Plus before 14004, ServiceDesk Plus MSP before 13001, SupportCenter Plus before 11026, and Vulnerability Manager Plus before 10.1.2220.18. Exploitation is only possible if SAML SSO has ever been configured for a product (for some products, exploitation requires that SAML SSO is currently active). |
| CVE-2022-47523 | Critical | 2023-01-05 | Not applicable | Forecast only | Zoho ManageEngine Access Manager Plus before 4309, Password Manager Pro before 12210, and PAM360 before 5801 are vulnerable to SQL Injection. |
| CVE-2022-43672 | Critical | 2022-11-12 | Not applicable | Forecast only | Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection (in a different software component relative to CVE-2022-43671. |
| CVE-2022-43671 | Critical | 2022-11-12 | Not applicable | Forecast only | Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection. |
| CVE-2022-40300 | Critical | 2022-09-16 | Not applicable | Forecast only | Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multiple SQL injection vulnerabilities. |
| CVE-2022-35405 | Critical | 2022-07-19 | Not applicable | Exploited | Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.) |
| CVE-2021-22531 | Medium | 2022-05-12 | Not applicable | No public exploit | A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ Access Manager 4.5 and 5.0 |
| CVE-2022-26326 | Medium | 2022-05-02 | Not applicable | No public exploit | Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2 |
| CVE-2022-26325 | Medium | 2022-05-02 | Not applicable | No public exploit | Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2 |
| CVE-2022-29081 | Critical | 2022-04-28 | Not applicable | Exploited | Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs (for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize) via the ../RestAPI substring. |
| CVE-2021-44676 | Critical | 2021-12-20 | Not applicable | No public exploit | Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g., access control details) and modify a few aspects of the application state. |
| CVE-2021-24830 | Medium | 2021-11-23 | Not applicable | No public exploit | The Advanced Access Manager WordPress plugin before 6.8.0 does not escape some of its settings when outputting them, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed |
| CVE-2021-22528 | High | 2021-09-13 | Not applicable | No public exploit | Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 |
| CVE-2021-22527 | High | 2021-09-13 | Not applicable | No public exploit | Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 |
| CVE-2021-22526 | Medium | 2021-09-13 | Not applicable | No public exploit | Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 |
| CVE-2021-22524 | Medium | 2021-09-13 | Not applicable | No public exploit | Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 |
| CVE-2021-22525 | Medium | 2021-09-02 | Not applicable | No public exploit | This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1 |
| CVE-2021-20439 | High | 2021-07-15 | Not applicable | No public exploit | IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user. |
| CVE-2021-22506 | High | 2021-03-26 | Not applicable | Exploited | Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage. |
| CVE-2020-25840 | Medium | 2021-03-26 | Not applicable | No public exploit | Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0. The vulnerability could cause configuration destruction. |
| CVE-2021-22496 | High | 2021-03-25 | Not applicable | No public exploit | Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3. The vulnerability could cause information leakage. |
| CVE-2020-35935 | High | 2021-01-01 | Not applicable | No public exploit | The Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on profile updates via the aam_user_roles POST parameter if Multiple Role support is enabled. (The mechanism for deciding whether a user was entitled to add a role did not work in various custom-role scenarios.) |
| CVE-2020-35934 | Medium | 2021-01-01 | Not applicable | No public exploit | The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metadata) upon login via the REST API (aam/v1/authenticate or aam/v2/authenticate). This is a security problem if this object stores information that the user is not supposed to have (e.g., custom metadata added by a different plugin). |
| CVE-2020-4499 | Critical | 2020-10-15 | Not applicable | No public exploit | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authentication checks and gain access to applications. IBM X-Force ID: 182216. |
| CVE-2019-4552 | Medium | 2020-10-15 | Not applicable | No public exploit | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 165960. |
| CVE-2020-4395 | Medium | 2020-10-14 | Not applicable | No public exploit | IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 179358. |
| CVE-2020-4699 | Medium | 2020-10-12 | Not applicable | No public exploit | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186947. |
| CVE-2020-4661 | Medium | 2020-10-12 | Not applicable | No public exploit | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186142. |
| CVE-2020-4660 | Medium | 2020-10-12 | Not applicable | No public exploit | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186140. |
| CVE-2019-4725 | Medium | 2020-10-06 | Not applicable | No public exploit | IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172131. |
| CVE-2020-4461 | Medium | 2020-05-20 | Not applicable | No public exploit | IBM Security Access Manager Appliance 9.0.7.1 could allow an authenticated user to bypass security by allowing id_token claims manipulation without verification. IBM X-Force ID: 181481. |
| CVE-2019-19994 | Critical | 2020-02-26 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows blind Command Injection. An attacker without authentication is able to execute arbitrary operating system command by injecting the vulnerable parameter in the PHP Web page /common/vam_monitor_sap.php. |
| CVE-2019-19993 | Medium | 2020-02-26 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several full path disclosure vulnerability were discovered. A user, even with no authentication, may simply send arbitrary content to the vulnerable pages to generate error messages that expose some full paths. |
| CVE-2019-19992 | Medium | 2020-02-26 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to read XML files on the filesystem via the web interface. The PHP page /common/vam_editXml.php doesn't check the parameter that identifies the file name to be read. Thus, an attacker can manipulate the file name to access a potentially sensitive file within the filesystem. |
| CVE-2019-19991 | Medium | 2020-02-26 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Reflected Cross-site scripting (XSS) vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via the web pages /vam/vam_anagraphic.php, /vam/vam_vamuser.php, /common/vamp_main.php, and /wiz/change_password.php. |
| CVE-2019-19990 | Medium | 2020-02-26 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Stored Cross-site scripting (XSS) vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via the web pages /monitor/s_headmodel.php and /vam/vam_user.php. |
| CVE-2019-19989 | High | 2020-02-26 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several PHP pages, and other type of files, are reachable by any user without checking for user identity and authorization. |
| CVE-2019-19988 | High | 2020-02-26 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to create and write XML files on the filesystem via /common/vam_editXml.php in the web interface. The vulnerable PHP page checks none of these: the parameter that identifies the file name to be created, the destination path, or the extension. Thus, an attacker can manipulate the file name to create any type of file within the filesystem with arbitrary content. |
| CVE-2019-19987 | Medium | 2020-02-26 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows Cross-Site Request Forgery (CSRF) on any HTML form. An attacker can exploit the vulnerability to abuse functionalities such as change password, add user, add privilege, and so on. |
| CVE-2019-19986 | High | 2020-02-26 | Not applicable | No public exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. An attacker without authentication is able to execute arbitrary SQL SELECT statements by injecting the HTTP (POST or GET) parameter persoid into /tools/VamPersonPhoto.php. The SQL Injection type is Error-based (this means that relies on error messages thrown by the database server to obtain information about the structure of the database). |
| CVE-2019-4707 | High | 2020-01-28 | Not applicable | No public exploit | IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 172018. |
| CVE-2014-6059 | High | 2020-01-13 | Not applicable | No public exploit | WordPress Advanced Access Manager Plugin before 2.8.2 has an Arbitrary File Overwrite Vulnerability |
| CVE-2019-13497 | Medium | 2019-11-04 | Not applicable | No public exploit | One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests. |
| CVE-2019-13496 | High | 2019-11-04 | Not applicable | No public exploit | One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response. |
| CVE-2019-4036 | High | 2019-10-25 | Not applicable | No public exploit | IBM Security Access Manager Appliance could allow unauthenticated attacker to cause a denial of service in the reverse proxy component. IBM X-Force ID: 156159. |
| CVE-2019-4513 | High | 2019-08-26 | Not applicable | No public exploit | IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 164555. |
| CVE-2011-5328 | High | 2019-08-20 | Not applicable | No public exploit | The user-access-manager plugin before 1.2 for WordPress has CSRF. |
| CVE-2019-13498 | High | 2019-07-29 | Not applicable | Proof of concept only | One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks. This issue is fixed in version 8.1.4. |
| CVE-2019-4158 | Medium | 2019-06-25 | Not applicable | No public exploit | IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resources or functionality to unintended actors. IBM X-Force ID: 158574. |
| CVE-2019-4157 | Medium | 2019-06-25 | Not applicable | No public exploit | IBM Security Access Manager 9.0.1 through 9.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158573. |