CVE-2014-6086

no score yetEPSS 1.4%

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not ensure that HTTPS is used, which allows remote attackers to obtain sensitive information by sniffing the network during an HTTP session.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2014-12-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:security_access_manager_for_mobile
ibm:security_access_manager_for_web

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358
http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581
http://www-01.ibm.com/support/docview.wss?uid=swg21684475
https://exchange.xforce.ibmcloud.com/vulnerabilities/95813
http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358

Check your stack JSON