Skip to content
CVE Tracker
Back

CVE-2017-1476

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain…

Medium5.9EPSS 2.2%
Published
Updated
Reserved
Assigned by
ibm

Description

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 128610.

Scores

CVSS scores of CVE-2017-1476, by who scored it
Scored byCVSSScoreVector
ibmCNA (assigner)3.0Medium5.9CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O
NVDNVD · Modified3.0Medium5.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS (exploitation in 30 days)
2.2% · top 17% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.9.

Weakness

Affected products

  • IBM · Security Access Manager

    • affected 9.0.0.1
    • affected 7.0.0
    • affected 8.0.0
    • affected 8.0.0.1
    • affected 8.0.0.2
    • affected 8.0.0.3
    • affected 8.0.0.4
    • affected 8.0.0.5
    • affected 8.0.1
    • affected 8.0.1.2
    • affected 8.0.1.3
    • affected 8.0.1.4
    • affected 9.0.0
    • affected 9.0.1.0
    • affected 9.0.2.0
    • affected 8.0.1.5
    • affected 9.0.2.1
    • affected 9.0.3
    • affected 9.0.3.1
    • affected 8.0.1.6

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2017-1476 badge
[![CVE-2017-1476](https://trackcve.app/badge/CVE-2017-1476.svg)](https://trackcve.app/cve/CVE-2017-1476)

Record last updated .