Skip to content

Known vulnerabilities in IBM Security Verify Access

Is your version affected?

CVE Summary Score Published
CVE-2022-22464 IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic… 5.9 Medium Jul 8, 2022
CVE-2022-22463 IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to SQL injection 5.4 Medium Jul 8, 2022
CVE-2022-22370 IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site scripting 5.4 Medium Jul 8, 2022
CVE-2022-22311 IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain sensitive information or… 4.8 Medium Mar 31, 2022
CVE-2021-38957 IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input… 3.1 Low Jan 7, 2022
CVE-2021-38956 IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive version information in HTTP response headers… 5.3 Medium Jan 7, 2022
CVE-2021-38921 IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic algorithms that could allow… 5.9 Medium Jan 7, 2022
CVE-2021-38895 IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting 3.0 Low Jan 7, 2022
CVE-2021-38894 IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when… 2.7 Low Jan 7, 2022
CVE-2021-29665 IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking… 9.0 Critical May 31, 2021
CVE-2021-20585 IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in… 5.3 Medium May 31, 2021
CVE-2021-20576 IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could… 7.5 High May 31, 2021
CVE-2021-20575 IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system 4.0 Medium May 31, 2021
CVE-2020-4499 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth… 7.3 High Oct 15, 2020
CVE-2019-4552 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting… 6.1 Medium Oct 15, 2020
CVE-2020-4699 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive… 5.3 Medium Oct 12, 2020
CVE-2020-4661 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive… 5.3 Medium Oct 12, 2020
CVE-2020-4660 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive… 5.3 Medium Oct 12, 2020

Other IBM products