SV
Product
Security Verify Access Docker
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 13Medium 8Low 0
Watch
Add Security Verify Access Docker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-45647 | 9.8 | Jan 20 | IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an… Affected: 10.0.0 through 10.0.8 |
| CVE-2021-39070 | 9.8 | Feb 2 | IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an attacker to authenticate as any user on… Affected: 10.0.0; 10.0.1.0; 10.0.2.0 |
| CVE-2025-36356 | 9.3 | Oct 6 | IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their… Affected: 10.0.0.0 before 10.0.9.0; 10.0.9.0; 10.0.9.0; 10.0.9.0 |
| CVE-2023-31004 | 9.0 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2025-36355 | 8.5 | Oct 6 | IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute… Affected: 10.0.0.0 before 10.0.9.0; 10.0.9.0; 10.0.9.0; 10.0.9.0 |
| CVE-2024-35133 | 8.2 | Aug 29 | IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect attack Affected: 10.0.0 through 10.0.8 |
| CVE-2024-35141 | 7.8 | Dec 19 | IBM Security Verify Access privilege escalation Affected: 10.0.0 through 10.0.7 |
| CVE-2024-35142 | 7.8 | May 31 | IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges Affected: 10.0.0 before 10.0.7 |
| CVE-2024-35140 | 7.8 | May 31 | IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to improper certificate validation Affected: 10.0.0 before 10.0.7 |
| CVE-2023-31005 | 7.8 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2023-31003 | 7.8 | Jan 11 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could allow a local user to… Affected: 10.0.0.0 before 10.0.0.7 |
| CVE-2024-43187 | 7.5 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed… Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2023-31006 | 7.5 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2023-30999 | 7.5 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2025-36354 | 7.3 | Oct 6 | IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute… Affected: 10.0.0.0 before 10.0.9.0; 10.0.9.0; 10.0.9.0; 10.0.9.0 |
| CVE-2023-43016 | 7.3 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2023-32327 | 7.1 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2024-45657 | 6.7 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform unauthorized actions due to incorrect permissions… Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2022-36775 | 6.5 | Feb 17 | IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, 10.0.3.0, and10.0.4.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers Affected: 10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0; 10.0.4.0 |
| CVE-2024-40700 | 6.1 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2023-32329 | 5.5 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2023-38267 | 5.5 | Jan 11 | IBM Security Access Manager Appliance (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could allow a local user to… Affected: 10.0.0.0 before 10.0.0.7 |
| CVE-2023-31001 | 5.5 | Jan 11 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive… Affected: 10.0.0.0 before 10.0.0.7 |
| CVE-2025-0163 | 5.3 | Jun 11 | IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled… Affected: 10.0.0 before 10.0.9 |
| CVE-2024-45659 | 5.3 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed technical error message is… Affected: 10.0.0.0 before 10.0.9.0 |
Showing 25