Skip to content
Sign in
4.8 Medium

CVE-2021-20524 IBM Security Verify Access Docker 10.0.0 is vulnerable to cross-site scripting

Description

IBM Security Verify Access Docker 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198661.

Affected products and versions

Product Affected versions Fixed in
Security Verify Access Docker 10.0.0 No fix stated

Other CVEs of Security Verify Access Docker

The 43 CVEs of Security Verify Access Docker →
CVE-2025-36354 IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0… 7.3 High CVE-2025-36355 IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0… 8.5 High CVE-2025-36356 IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0… 9.3 Critical CVE-2025-0163 IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames… 5.3 Medium
Track this CVE