CVE-2014-6082: ibm security_access_manager_for_mobile

EPSS trend

Probability

1.39%

Chance of exploitation in the next 30 days

Percentile

72%

Versus all other CVEs

30-day change

0.00 pp

From 1.39% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.39%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

6 links

www-01.ibm.com/support/docview.wss?uid=swg21684475X Refsource CONFIRMVendor Advisory
secunia.com/advisories/61945Third Party AdvisoryX Refsource SECUNIA
www-01.ibm.com/support/docview.wss?uid=swg1IV67358Vendor AdvisoryX Refsource AIXAPAR
www-01.ibm.com/support/docview.wss?uid=swg21691601X Refsource CONFIRM
www-01.ibm.com/support/docview.wss?uid=swg1IV67581Vendor AdvisoryX Refsource AIXAPAR
exchange.xforce.ibmcloud.com/vulnerabilities/95809VDB EntryX Refsource XF

Related vulnerabilities

CVE-2013-6329ibmcontent_manager_ondemand_for_multiplatforms+23.16%12y ago17-12-2013 11:00IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted handshake during resumption of an SSLv2 session.CVE-2015-4963ibmsecurity_access_manager_for_web3.30%10y ago08-11-2015 22:00IBM Security Access Manager for Web 7.x before 7.0.0.16 and 8.x before 8.0.1.3 mishandles WebSEAL HTTPTransformation requests, which allows remote attackers to read or write to arbitrary files via unspecified vectors.CVE-2016-3025ibmsecurity_access_manager+11.60%9y ago25-11-2016 03:38IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.CVE-2016-3028ibmsecurity_access_manager+13.54%9y ago25-11-2016 03:38IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leveraging LMI admin access.CVE-2016-3018ibm corporationaccess manager+30.78%9y ago01-02-2017 20:00IBM Security Access Manager for Web is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2016-3045ibm corporationaccess manager+30.84%9y ago01-02-2017 20:00IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history.

All vulnerabilities insecurity_access_manager_for_mobile security_access_manager_for_web

CVE-2014-6082: ibm security_access_manager_for_mobile

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References