Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

IBM

IBM Security Secret Server vulnerabilities

25 published CVEs name IBM Security Secret Server among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2021-20582

    IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have…

    IBM · Security Secret Server

    Low3.7
  • CVE-2021-20569

    IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation. IBM X-Force ID: 199243.

    IBM · Security Secret Server

    Medium5.3
  • CVE-2021-20508

    IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…

    IBM · Security Secret Server

    Low2.7
  • CVE-2020-4843

    IBM Security Secret Server 10.6 stores potentially sensitive information in config files that could be read by an authenticated user. IBM X-Force ID: 190048.

    IBM · Security Secret Server

    Medium6.3
  • CVE-2020-4842

    IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…

    IBM · Security Secret Server

    Low2.7
  • CVE-2020-4841

    IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport…

    IBM · Security Secret Server

    Medium5.9
  • CVE-2020-4840

    IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a…

    IBM · Security Secret Server

    High7.4
  • CVE-2020-4340

    IBM Security Secret Server prior to 10.9 could allow an attacker to bypass SSL security due to improper certificate validation. IBM X-Force ID: 178180.

    IBM · Security Secret Server

    Low3.1
  • CVE-2020-4324

    IBM Security Secret Server proir to 10.9 could allow a remote attacker to bypass security restrictions, caused by improper input validation. IBM X-Force ID:…

    IBM · Security Secret Server

    Low3.5
  • CVE-2020-4459

    IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,…

    IBM · Security Secret Server

    Medium5.9
All 25 in the list