CVE-2014-6089: IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0....

Security readout for executives and security teams

This CVE affects legacy IBM Security Access Manager products. An authenticated remote user could disrupt system operations by uploading a file to a protected area. The issue matters because these systems can sit in front of important web and mobile access workflows. Exposure is most likely in organizations still running the named IBM Security Access Manager versions, especially where authenticated users can upload files into protected areas. The source bundle does not identify broader affected products. Treat this as a targeted availability risk for legacy access-management infrastructure. Prioritize remediation where affected systems support customer, partner, or employee access and where many authenticated users can upload files. Mitigation focus: Upgrade affected Mobile deployments to 8.0.1 or later vendor-fixed levels.; Upgrade affected Web 7.x deployments to 7.0.0 FP10 or later.; Upgrade affected Web 8.x deployments to 8.0.1 or later..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.