Ibm Security Access Manager For Enterprise Single Sign-on
2 CVEs affecting Ibm Security Access Manager For Enterprise Single Sign-on. Latest disclosed: 2019-08-26. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-4513 | High | 8.2 | 2019-08-26 | IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remo… |
CVE-2017-1732 | Medium | 4.3 | 2018-08-17 | IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be… |