ibm tivoli federated identity manager business gateway

Name: ibm tivoli federated identity manager business gateway
Brand: ibm

productUS

cpe:2.3:a:ibm:tivoli_federated_identity_manager_business_gateway:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical3high7medium0low

updated 2026-10-29

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2012-3315US	medium5.0	2.59% (85th)	—	no fix	2012-11-08	7 versions
CVE-2011-3137US	high10.0	1.77% (78th)	—	no fix	2011-08-12	5 versions
CVE-2011-3138US	medium5.0	1.76% (78th)	—	no fix	2011-08-12	5 versions
CVE-2011-3135US	high10.0	1.57% (75th)	—	no fix	2011-08-12	5 versions
CVE-2011-3136US	high10.0	1.52% (75th)	—	no fix	2011-08-12	5 versions
CVE-2013-5431US	medium5.8	1.36% (72nd)	—	no fix	2013-11-01	4 versions
CVE-2011-1386US	medium4.3	1.18% (68th)	—	no fix	2012-01-04	3 versions
CVE-2013-0582US	medium4.3	1.16% (67th)	—	no fix	2013-05-02	11 versions
CVE-2012-6359US	medium4.3	1.13% (66th)	—	no fix	2013-01-18	9 versions
CVE-2012-3314US	medium5.8	0.84% (58th)	—	no fix	2012-10-02	4 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation2 CVEs
CWE-264CWE-2642 CVEs
CWE-287Improper Authentication1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.