CVE-2014-4809

Published: Oct 3, 2014Modified: May 6, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

The WebSEAL component in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, when e-community SSO is enabled, allows remote attackers to cause a denial of service (component hang) via unspecified vectors.

Affected (14)

Products: Ibm: Security Access Manager For Web 8.0 Firmware, Security Access Manager For Web Appliance, Security Access Manager For Web 7.0 Firmware

Ibm

3 products

Security Access Manager For Web 8.0 Firmware

Security Access Manager For Web Appliance

Security Access Manager For Web 7.0 Firmware

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Access Manager For Web 8.0 Firmware	Version 8.0.0.2
Ibm Security Access Manager For Web 8.0 Firmware	Version 8.0.0.3
Ibm Security Access Manager For Web 8.0 Firmware	Version 8.0.0.4
Ibm Security Access Manager For Web Appliance	Version 8.0

Configuration B

10 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.0
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.1
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.2
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.3
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.4
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.5
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.6
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.7
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.8
Ibm Security Access Manager For Web Appliance	Version 7.0