| Package | Affected versions | Patched versions |
|---|---|---|
| security access manager | = 9.0.0= 9.0.0.1= 9.0.1.0 | |
| security access manager for mobile | = 8.0.0.0= 8.0.0.1= 8.0.0.2= 8.0.0.3= 8.0.0.5= 8.0.1.0= 8.0.1.2= 8.0.1.3= 8.0.1.4 | |
| security access manager for web | = 8.0.0.0= 8.0.0.1= 8.0.0.2= 8.0.0.3= 8.0.0.5= 8.0.1.0= 8.0.1.2= 8.0.1.3= 8.0.1.4 |
IBM Security Access Manager for Web is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free