ibm security access manager
productUScpe:2.3:a:ibm:security_access_manager:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
3critical13high29medium3low
updated 2026-10-28
| ID | severity CVSS base severity and score (0–10). | EPSS FIRST.org probability this is exploited in the next 30 days, with its percentile rank among all CVEs. | exploitable On CISA's Known Exploited Vulnerabilities list, or a public exploit is on file. | patched Whether a fixed version is on file for an affecting range. | published | affected |
|---|
| CVE-2018-1722US | critical10.0 | 9.04% (95th) | — | ✗no fix | 2018-08-24 | 2 versions |
| CVE-2016-3028US | critical9.1 | 3.54% (89th) | — | ✗no fix | 2016-11-25 | 3 versions |
| CVE-2018-1850US | high7.5 | 2.25% (83rd) | — | ✗no fix | 2018-10-22 | 3 versions |
| CVE-2017-1476US | medium5.9 | 2.21% (83rd) | — | ✗no fix | 2018-06-06 | 9.0.0 → 9.0.3.1 |
| CVE-2018-1970US | high7.1 | 1.85% (79th) | — | ✗no fix | 2019-02-04 | 7.0.1 → 7.0.1.10 |
| CVE-2017-1480US | medium4.3 | 1.72% (77th) | — | ✗no fix | 2018-06-06 | 9.0.0 → 9.0.3.1 |
| CVE-2017-1474US | medium5.3 | 1.70% (77th) | — | ✗no fix | 2018-06-06 | 9.0.0 → 9.0.3.1 |
| CVE-2016-3025US | high8.1 | 1.60% (76th) | — | ✗no fix | 2016-11-25 | 3 versions |
| CVE-2019-4135US | high8.8 | 1.51% (74th) | — | ✗no fix | 2019-06-25 | 9.0.1 → 9.0.6 |
| CVE-2019-4707US | high7.1 | 1.40% (72nd) | — | ✗no fix | 2020-01-28 | = 9.0.7.0 |
| CVE-2019-4036US | high7.5 | 1.38% (72nd) | — | ✗no fix | 2019-10-25 | — |
| CVE-2018-1886US | medium5.3 | 1.30% (70th) | — | ✗no fix | 2018-12-13 | 9.0.1.0 → 9.0.5.0 |
| CVE-2020-4499US | critical9.8 | 1.25% (69th) | — | ✓9.0.7.2 | 2020-10-15 | 9.0.7.0 → 9.0.7.2 |
| CVE-2021-20439US | high7.5 | 1.19% (68th) | — | ✗no fix | 2021-07-15 | = 9.0 |
| CVE-2018-1803US | medium6.1 | 1.18% (68th) | — | ✗no fix | 2018-12-13 | 9.0.1.0 → 9.0.5.0 |
| CVE-2017-1489US | medium6.1 | 1.18% (68th) | — | ✗no fix | 2017-08-29 | 6 versions |
| CVE-2019-4153US | medium6.8 | 0.99% (62nd) | — | ✗no fix | 2019-06-25 | 9.0.1 → 9.0.6 |
| CVE-2018-1805US | medium4.3 | 0.98% (62nd) | — | ✗no fix | 2018-12-13 | 9.0.1.0 → 9.0.5.0 |
| CVE-2018-1653US | medium5.4 | 0.97% (62nd) | — | ✗no fix | 2018-12-13 | 9.0.1.0 → 9.0.5.0 |
| CVE-2018-1814US | high7.5 | 0.97% (62nd) | — | ✗no fix | 2018-12-13 | 9.0.1.0 → 9.0.5.0 |
| CVE-2020-4461US | medium6.5OT elevated | 0.93% (61st) | — | ✓9.0.7.1 | 2020-05-20 | 9.0 → 9.0.7.1 |
| CVE-2019-4552US | medium6.1 | 0.92% (60th) | — | ✓9.0.7.2 | 2020-10-15 | 9.0.7.0 → 9.0.7.2 |
| CVE-2018-1804US | low3.7 | 0.92% (60th) | — | ✗no fix | 2018-12-13 | 9.0.1.0 → 9.0.5.0 |
| CVE-2018-1813US | medium6.5 | 0.90% (60th) | — | ✗no fix | 2018-12-13 | 9.0.1.0 → 9.0.5.0 |
| CVE-2019-4157US | medium6.1 | 0.89% (59th) | — | ✗no fix | 2019-06-25 | 9.0.1 → 9.0.6 |
| CVE-2018-1815US | medium6.1 | 0.89% (59th) | — | ✗no fix | 2018-12-13 | 9.0.1.0 → 9.0.5.0 |
| CVE-2019-4156US | medium5.9OT elevated | 0.87% (59th) | — | ✗no fix | 2019-06-25 | 9.0.1 → 9.0.6 |
| CVE-2019-4151US | medium5.9 | 0.87% (59th) | — | ✗no fix | 2019-06-25 | 9.0.1 → 9.0.6 |
| CVE-2016-3045US | low3.7 | 0.84% (58th) | — | ✗no fix | 2017-02-01 | 3 versions |
| CVE-2016-3018US | medium6.1 | 0.78% (56th) | — | ✗no fix | 2017-02-01 | 3 versions |
| CVE-2019-4725US | medium6.1 | 0.73% (54th) | — | ✓9.0.7.0 | 2020-10-06 | 9.0.0.0 → 9.0.7.0 |
| CVE-2023-38370US | medium6.5OT elevated | 0.70% (53rd) | — | ✗no fix | 2024-06-27 | 10.0.0.0 → 10.0.7.1 |
| CVE-2019-4158US | medium5.4OT elevated | 0.67% (52nd) | — | ✗no fix | 2019-06-25 | 9.0.1 → 9.0.6 |
| CVE-2018-1740US | medium5.4 | 0.66% (51st) | — | ✗no fix | 2018-12-13 | 9.0.1.0 → 9.0.5.0 |
| CVE-2019-4150US | low3.7 | 0.58% (47th) | — | ✗no fix | 2019-06-25 | 9.0.1 → 9.0.6 |
| CVE-2023-38371US | high7.5OT elevated | 0.46% (40th) | — | ✗no fix | 2024-06-27 | 10.0.0.0 → 10.0.7.1 |
| CVE-2020-4699US | medium5.3 | 0.46% (39th) | — | ✗no fix | 2020-10-12 | = 9.0.7.0 |
| CVE-2020-4661US | medium5.3 | 0.46% (39th) | — | ✗no fix | 2020-10-12 | = 9.0.7.0 |
| CVE-2020-4660US | medium5.3 | 0.46% (39th) | — | ✗no fix | 2020-10-12 | = 9.0.7.0 |
| CVE-2018-1443US | medium5.9 | 0.40% (34th) | — | ✗no fix | 2018-03-08 | 9.0.0 → 9.0.4 |
| CVE-2019-4145US | high7.1 | 0.35% (29th) | — | ✗no fix | 2019-06-25 | 9.0.1 → 9.0.6 |
| CVE-2019-4152US | medium4.4 | 0.31% (24th) | — | ✗no fix | 2019-06-25 | 9.0.1 → 9.0.6 |
| CVE-2024-35137US | medium6.2 | 0.26% (17th) | — | ✗no fix | 2024-06-28 | 10.0.0.0 → 10.0.7.1 |
| CVE-2024-35139US | medium5.5OT elevated | 0.23% (14th) | — | ✗no fix | 2024-06-28 | 10.0.0.0 → 10.0.7.1 |
| CVE-2023-30998US | high7.8 | 0.23% (14th) | — | ✗no fix | 2024-06-27 | 10.0.0.0 → 10.0.7.1 |
| CVE-2023-30997US | high7.8 | 0.23% (14th) | — | ✗no fix | 2024-06-27 | 10.0.0.0 → 10.0.7.1 |
| CVE-2018-1887US | high7.8OT elevated | 0.21% (11th) | — | ✗no fix | 2018-12-13 | 9.0.1.0 → 9.0.5.0 |
| CVE-2023-38368US | medium5.5OT elevated | 0.19% (8th) | — | ✗no fix | 2024-06-27 | 10.0.0.0 → 10.0.7.1 |