Description

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.

Remediation

References

CVE-2017-1474

Related Vulnerabilities

Joomla Improper Input Validation Vulnerability (CVE-2013-3242)

WordPress Plugin PDW Media File Browser 'upload.php' Arbitrary File Upload (1.1)

jQuery UI Dialog Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41183)

TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-13422)

Oracle Application Server Other Vulnerability (CVE-2006-5356)

Severity

Medium

Classification

CVE-2017-1474 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities