7.1
Élevée
CVE-2023-32327 IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security…
Description
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 254783.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Verify Access Appliance 10.0 | 10.0.0.0 → 10.0.6.1 | Pas de correctif indiqué |
| Security Verify Access Docker 10.0 | 10.0.0.0 → 10.0.6.1 | Pas de correctif indiqué |
Autres CVE de Security Verify Access Appliance
Les 30 CVE de Security Verify Access Appliance →
CVE-2025-36354
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0…
7.3
Élevée
CVE-2025-36355
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0…
8.5
Élevée
CVE-2025-36356
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0…
9.3
Critique
CVE-2024-49814
IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated user to increase their…
7.8
Élevée