7.1
High
CVE-2023-32327 IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security…
Description
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 254783.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Verify Access Appliance 10.0 | 10.0.0.0 → 10.0.6.1 | No fix stated |
| Security Verify Access Docker 10.0 | 10.0.0.0 → 10.0.6.1 | No fix stated |
Other CVEs of Security Verify Access Appliance
The 30 CVEs of Security Verify Access Appliance →
CVE-2025-36354
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0…
7.3
High
CVE-2025-36355
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0…
8.5
High
CVE-2025-36356
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0…
9.3
Critical
CVE-2024-49814
IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated user to increase their…
7.8
High