Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Advisory: IBM Security Verify Access Appliance, Security Verify Access Container — ibm.com/support/pages/node/7182386 Clear all filters
TI-2024-30662 CVE-2024-45657 · GHSA-8x4c-mrmq-hg6p

IBM Security Verify Access incorrect privilege assignment

Priority LOW 29

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00142 Published 2025-02-04 No fix listed CWE-732
TI-2024-23219 CVE-2024-35138 · GHSA-4wcq-5frc-r2j3

IBM Security Verify Access cross-site request forgery

Priority LOW 28

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user tha…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00208 Published 2025-02-04 No fix listed CWE-352
TI-2024-28849 CVE-2024-43187 · GHSA-8gvx-qwj5-w87m

IBM Security Verify Access information disclosure

Priority LOW 32

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00248 Published 2025-02-04 No fix listed CWE-319
TI-2024-30663 CVE-2024-45658 · GHSA-f82g-wm67-p9rw

IBM Security Verify Access information disclosure

Priority LOW 24

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00431 Published 2025-02-04 No fix listed CWE-209
TI-2024-27099 CVE-2024-40700 · GHSA-5c44-5frm-74g4

IBM Security Verify Access cross-site scripting

Priority LOW 27

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00308 Published 2025-02-04 No fix listed CWE-79
TI-2024-30664 CVE-2024-45659 · GHSA-c5rf-2f3r-9gr9

IBM Security Verify Access information disclosure

Priority LOW 30

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00366 Published 2025-02-04 No fix listed CWE-209