Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: IBM Security Verify Governance — ibm.com/support/pages/node/7057377 Clear all filters
TI-2023-16715 CVE-2023-33837 · GHSA-v994-7f87-hh83

IBM Security Verify Governance information disclosure

Priority LOW 33

IBM Security Verify Governance 10.0 does not encrypt sensitive or critical information before storage or transmission.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00279 Published 2023-10-23 No fix listed CWE-319
TI-2023-16717 CVE-2023-33839 · GHSA-548m-xpmx-h6v4

IBM Security Verify Governance command execution

Priority MEDIUM 43

IBM Security Verify Governance 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0139 Published 2023-10-23 No fix listed CWE-78
TI-2022-06753 CVE-2022-22466 · GHSA-6gwq-qjqq-9xpv

IBM Security Verify Governance information disclosure

Priority MEDIUM 43

IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00594 Published 2023-10-23 No fix listed CWE-798
TI-2023-16718 CVE-2023-33840 · GHSA-64xv-qmpj-7grf

IBM Security Verify Governance cross-site scripting

Priority LOW 22

IBM Security Verify Governance 10.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00365 Published 2023-10-23 No fix listed CWE-79