6.1
Moyenne
CVE-2024-40700 IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting
Description
IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Verify Access Appliance 10.0 | 10.0.0 → 10.0.8 | Pas de correctif indiqué |
| Security Verify Access Container 10.0 | 10.0.0 → 10.0.8 | Pas de correctif indiqué |
Autres CVE de Security Verify Access Appliance
Les 30 CVE de Security Verify Access Appliance →
CVE-2025-36354
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0…
7.3
Élevée
CVE-2025-36355
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0…
8.5
Élevée
CVE-2025-36356
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0…
9.3
Critique
CVE-2024-49814
IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated user to increase their…
7.8
Élevée