Login Request a demo
Medium severity · published Feb 17, 2023
CVE-2022-36775
IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, 10.0.3.0, and10.0.4.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, 10.0.3.0, and10.0.4.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 233576.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SV
Security Verify Access · Ibm
10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0; 10.0.4.0 · source: NVD
SV
Security Verify Access Docker · Ibm
10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0; 10.0.4.0 · source: NVD
Affected product
SV
Security Verify Access
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-36775
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-36775
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/233576
Patch
https://www.ibm.com/support/pages/node/6953617
More from Security Verify Access
10.0
CVE-2024-28787
IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote attacker to obtain highly sensitive private information or…
9.8
CVE-2026-78401
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
9.8
CVE-2026-78406
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
9.8
CVE-2026-11928
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
9.8
CVE-2026-17616
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access