CVE-2014-0963: The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for...

Security readout for executives and security teams

CVE-2014-0963 is a denial-of-service issue in IBM Security Access Manager for Web reverse proxy components using IBM GSKit. A remote attacker could send malformed SSL traffic that causes an infinite loop, potentially making the reverse proxy unavailable. The bundle does not show data theft, code execution, or confirmed active exploitation. Exposure is most likely where IBM Security Access Manager for Web reverse proxies terminate SSL/TLS and are reachable by untrusted clients, especially internet-facing authentication or access gateway deployments. Environments not running the named ISAM versions or not using the reverse proxy feature are not evidenced as affected by this bundle. Schedule remediation for exposed ISAM reverse proxies because the business impact is service outage, not known compromise. Priority rises if the system fronts authentication, customer access, or critical partner workflows. Evidence is incomplete for severity scoring, so validate exposure before emergency handling. Mitigation focus: Upgrade ISAM for Web 7.0 to 7.0.0-ISS-SAM-IF0006 or later.; Upgrade ISAM for Web 8.0 to 8.0.0.3-ISS-WGA-IF0002 or later.; Review IBM advisories for deployment-specific interim fix prerequisites..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.