Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: IBM Security Verify Directory — ibm.com/support/pages/node/7145001 Clear all filters
TI-2022-14300 CVE-2022-32754 · GHSA-cpmh-cr7q-cf2x

IBM Security Verify Directory cross-site scripting

Priority LOW 22

IBM Security Verify Directory 10.0.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00321 Published 2024-03-22 No fix listed CWE-79
TI-2022-14297 CVE-2022-32751 · GHSA-fvqm-h49v-vxc9

IBM Security Verify Directory information disclosure

Priority LOW 30

IBM Security Verify Directory 10.0.0 could disclose sensitive server information that could be used in further attacks against the system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00453 Published 2024-03-22 No fix listed CWE-200
TI-2022-14302 CVE-2022-32756 · GHSA-rj3p-p9rq-vvc3

IBM Security Verify Directory information disclosure

Priority LOW 14

IBM Security Verify Directory 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00508 Published 2024-03-22 No fix listed CWE-209
TI-2022-14299 CVE-2022-32753 · GHSA-g8qp-8hw4-2mf9

IBM Security Verify Directory information disclosure

Priority LOW 28

IBM Security Verify Directory 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0018 Published 2024-03-22 No fix listed CWE-326