Skip to content

Known vulnerabilities in IBM Security Verify Access Appliance

Is your version affected?

CVE Summary Score Published
CVE-2025-36354 IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0… 7.3 High Oct 6, 2025
CVE-2025-36355 IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0… 8.5 High Oct 6, 2025
CVE-2025-36356 IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0… 9.3 Critical Oct 6, 2025
CVE-2024-49814 IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated user to increase their… 7.8 High Feb 6, 2025
CVE-2024-45657 IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to… 5.0 Medium Feb 4, 2025
CVE-2024-35138 IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site request forgery… 6.5 Medium Feb 4, 2025
CVE-2024-43187 IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data… 5.9 Medium Feb 4, 2025
CVE-2024-45658 IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain… 2.7 Low Feb 4, 2025
CVE-2024-40700 IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting 6.1 Medium Feb 4, 2025
CVE-2024-45659 IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain… 5.3 Medium Feb 4, 2025
CVE-2024-31874 IBM Security Verify Access Appliance 10.0.0 through 10.0.7 uses uninitialized variables when deploying that could… 6.2 Medium Apr 10, 2024
CVE-2024-31873 IBM Security Verify Access Appliance 10.0.0 through 10.0.7 contains hard-coded credentials which it uses for its own… 7.5 High Apr 10, 2024
CVE-2024-31871 IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the… 7.5 High Apr 10, 2024
CVE-2024-31872 IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the… 7.5 High Apr 10, 2024
CVE-2024-28787 IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote… 8.7 High Apr 4, 2024
CVE-2023-38369 IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker images should have strong… 6.2 Medium Feb 7, 2024
CVE-2023-31002 IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 temporarily stores sensitive information in files that… 5.1 Medium Feb 7, 2024
CVE-2023-43017 IBM Security Verify Access 10.0.0.0 through 10.0.6.1 could allow a privileged user to install a configuration file… 8.2 High Feb 7, 2024
CVE-2023-32330 IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure calls that could allow an attacker on the network… 7.5 High Feb 7, 2024
CVE-2023-32328 IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some instances that could allow an… 7.5 High Feb 7, 2024
CVE-2023-31006 IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security… 6.5 Medium Feb 3, 2024
CVE-2023-31004 IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security… 8.3 High Feb 3, 2024
CVE-2023-32329 IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security… 6.2 Medium Feb 3, 2024
CVE-2023-32327 IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security… 7.1 High Feb 3, 2024
CVE-2023-43016 IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security… 7.3 High Feb 3, 2024

Other IBM products