CVE-2018-1722critical

CVE-2018-1722: critical vulnerability in IBM Security Access Manager Appliance

Published · Updated

Follow this CVE+ Monitor Security Access Manager Appliance

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 10epss 8.9%
IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when Advanced Access Control or Federation services are running. IBM X-Force ID: 147370.
CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:N/S:C/UI:N/E:U/RC:C/RL:O
Affected products
IBM · Security Access Manager Appliance
Related CVEs — IBM Security Access Manager Appliance

In the same product, most dangerous first.

CVE-2018-1850HIGHCVE-2018-1850EPSS 2.2%CVE-2019-4707HIGHCVE-2019-4707EPSS 1.4%CVE-2018-1886MEDIUMCVE-2018-1886EPSS 1.3%CVE-2018-1803MEDIUMCVE-2018-1803EPSS 1.2%CVE-2018-1805MEDIUMCVE-2018-1805EPSS 1.0%CVE-2018-1653MEDIUMCVE-2018-1653EPSS 1.0%