Skip to content

Known vulnerabilities in IBM Security Verify Access

Is your version affected?

CVE Summary Score Published
CVE-2026-1346 IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through… 9.3 Critical Apr 8, 2026
CVE-2026-1343 IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through… 7.2 High Apr 8, 2026
CVE-2026-1342 IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through… 8.5 High Apr 7, 2026
CVE-2026-2475 IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through… 3.1 Low Apr 1, 2026
CVE-2026-1491 IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through… 5.3 Medium Apr 1, 2026
CVE-2026-2862 IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through… 5.3 Medium Apr 1, 2026
CVE-2026-1345 IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through… 7.3 High Apr 1, 2026
CVE-2026-4101 IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through… 8.1 High Apr 1, 2026
CVE-2026-4364 IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through… 5.4 Medium Apr 1, 2026
CVE-2025-36087 IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9,… 8.1 High Oct 13, 2025
CVE-2025-0163 IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames… 5.3 Medium Jun 11, 2025
CVE-2025-0161 IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute… 7.8 High Feb 20, 2025
CVE-2024-45647 IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow… 5.6 Medium Jan 20, 2025
CVE-2024-49804 IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a locally authenticated non-administrative… 7.8 High Nov 29, 2024
CVE-2024-49806 IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or… 9.4 Critical Nov 29, 2024
CVE-2024-49805 IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or… 9.4 Critical Nov 29, 2024
CVE-2024-49803 IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a remote authenticated attacker to execute… 9.8 Critical Nov 29, 2024
CVE-2024-35133 IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct… 6.8 Medium Aug 29, 2024
CVE-2023-30430 IBM Security Verify Access 10.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from trace… 5.5 Medium Jun 27, 2024
CVE-2024-31883 IBM Security Verify Access 10.0.0.0 through 10.0.7.1, under certain configurations, could allow an unauthenticated… 5.3 Medium Jun 27, 2024
CVE-2022-43868 IBM Security Verify Access OIDC Provider could disclose directory information that could aid attackers in further… 5.3 Medium Oct 14, 2023
CVE-2022-43740 IBM Security Verify Access OIDC Provider could allow a remote user to cause a denial of service due to uncontrolled… 7.5 High Oct 14, 2023
CVE-2023-25927 IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the… 6.5 Medium May 12, 2023
CVE-2022-36775 IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, 10.0.3.0, and10.0.4.0 is vulnerable to HTTP header injection,… 6.5 Medium Feb 17, 2023
CVE-2022-22465 IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 could allow a local user to obtain… 6.3 Medium Jul 8, 2022

Other IBM products