What’s Vulnerable › Vulnerabilities

CVE-2017-1473

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-04-23 · updated 2026-06-17
Weakness: CWE-326

Description

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 128605.

Affected products

IBM Security Access Manager Firmware: 9.0.0, 9.0.0.1, 9.0.1.0, 9.0.2.0, 9.0.2.1, 9.0.3 (+1)
IBM Security Access Manager For Mobile: 8.0.0, 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.4, 8.0.0.5 (+6)
IBM Security Access Manager For Web Firmware: 8.0.0, 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.4, 8.0.0.5 (+6)

References

Get alerted when CVE-2017-1473 or the next vulnerability affects your stack