VulnerabilityModified
CVE-2014-3073
Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to execute arbitrary code via unknown vectors.
HIGH 10.0EPSS 4.22%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.22%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to execute arbitrary code via unknown vectors.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 4.22% probability · 90th percentile
- CISA KEV
- Not listed
- Affected
- ibm/security access manager for mobile software · ibm/security access manager for web software · ibm/security access manager for mobile appliance · ibm/security access manager for web appliance
- Source
- psirt@us.ibm.com
References
- http://secunia.com/advisories/59438
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV61563
- http://www-01.ibm.com/support/docview.wss?uid=swg21676699Vendor Advisory
- http://www.securityfocus.com/bid/68137
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93790
- http://secunia.com/advisories/59438
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV61563
- http://www-01.ibm.com/support/docview.wss?uid=swg21676699Vendor Advisory
- http://www.securityfocus.com/bid/68137
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93790
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.