Description
IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 150017.
Remediation
References
Related Vulnerabilities
WebERP Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2018-20420)
Oracle Database Server CVE-2009-0997 Vulnerability (CVE-2009-0997)
WordPress Plugin WP-RecentComments 'page' Parameter Cross-Site Scripting (2.0.6)
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5489)