SV
Product
Security Verify Access
139
CVEs
0
On KEV
10.0
Max CVSS
23
New 30D
Severity mix
Critical 17High 60Medium 56Low 6
Watch
Add Security Verify Access to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-13260 | 7.5 | Sep 14 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-13297 | 7.5 | Sep 4 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-11932 | 7.5 | Aug 12 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2024-43187 | 7.5 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed… Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2022-32759 | 7.5 | Jul 25 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthorized user to obtain… Affected: 10.0.0 |
| CVE-2024-31873 | 7.5 | Apr 10 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 contains hard-coded credentials which it uses for its own inbound authentication that could be obtained by a malicious… Affected: 10.0.0 through 10.0.7 |
| CVE-2023-31006 | 7.5 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2023-30999 | 7.5 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2023-25927 | 7.5 | May 12 | IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting… Affected: 10.0.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5 |
| CVE-2022-22464 | 7.5 | Jul 8 | IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly… Affected: 10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0 |
| CVE-2021-38957 | 7.5 | Jan 10 | IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation Affected: 10.0.0; 10.0.1.0; 10.0.2.0 |
| CVE-2021-38921 | 7.5 | Jan 10 | IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 10.0.0; 10.0.1.0; 10.0.2.0 |
| CVE-2021-20497 | 7.5 | Jul 15 | IBM Security Verify Access Docker 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 10.0.0 |
| CVE-2021-20439 | 7.5 | Jul 15 | IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user Affected: 10.0.0 |
| CVE-2021-20576 | 7.5 | Jun 1 | IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the application to crash Affected: 20.07 |
| CVE-2026-11923 | 7.4 | Aug 12 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-1345 | 7.3 | Apr 1 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2025-36354 | 7.3 | Oct 6 | IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute… Affected: 10.0.0.0 before 10.0.9.0; 10.0.9.0; 10.0.9.0; 10.0.9.0 |
| CVE-2023-43016 | 7.3 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2026-12109 | 7.2 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-11934 | 7.2 | Sep 15 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-12618 | 7.2 | Aug 12 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-12005 | 7.2 | Aug 12 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-1343 | 7.2 | Apr 8 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2023-43017 | 7.2 | Feb 7 | IBM Security Verify Access 10.0.0.0 through 10.0.6.1 could allow a privileged user to install a configuration file that could allow remote access Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2021-20533 | 7.2 | Jul 15 | IBM Security Verify Access Docker 10.0.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request Affected: 10.0.0 |
| CVE-2023-32327 | 7.1 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2021-29699 | 6.8 | Jul 15 | IBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary files with a dangerous file type that could be excuted by an user Affected: 10.0.0 |
| CVE-2024-45657 | 6.7 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform unauthorized actions due to incorrect permissions… Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2026-19494 | 6.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-78399 | 6.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-19878 | 6.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-11927 | 6.5 | Sep 15 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-4938 | 6.5 | Jul 17 | Incorrect Authorization in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2026-5926 | 6.5 | Apr 22 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2024-35138 | 6.5 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and… Affected: 10.0.0 through 10.0.8 |
| CVE-2022-36775 | 6.5 | Feb 17 | IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, 10.0.3.0, and10.0.4.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers Affected: 10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0; 10.0.4.0 |
| CVE-2022-22463 | 6.5 | Jul 8 | IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to SQL injection Affected: 10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0 |
| CVE-2022-22311 | 6.5 | Mar 31 | IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain sensitive information or possibly change some information due to improper validiation… Affected: 10.0.0; 10.0.1; 10.0.2; 10.0.3 |
| CVE-2021-20537 | 6.5 | Jul 15 | IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound… Affected: 10.0.0 |
| CVE-2026-17189 | 6.1 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-13276 | 6.1 | Sep 14 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-7364 | 6.1 | Jul 17 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2024-40700 | 6.1 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2019-4552 | 6.1 | Oct 15 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attacks Affected: 10.0.0 before 10.0.0.1 |
| CVE-2024-31883 | 5.9 | Jun 27 | IBM Security Verify Access 10.0.0.0 through 10.0.7.1, under certain configurations, could allow an unauthenticated attacker to cause a denial of service due to asymmetric resource… Affected: 10.0.0.0 through 10.0.7.1 |
| CVE-2023-30430 | 5.5 | Jun 27 | IBM Security Verify Access 10.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from trace logs Affected: 10.0.0.0 through 10.0.7.1 |
| CVE-2024-31874 | 5.5 | Apr 10 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 uses uninitialized variables when deploying that could allow a local user to cause a denial of service Affected: 10.0.0 through 10.0.7 |
| CVE-2024-25027 | 5.5 | Mar 31 | IBM Security Verify Access 10.0.6 could disclose sensitive snapshot information due to missing encryption Affected: 10.0.6 |
| CVE-2023-32329 | 5.5 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow… Affected: 10.0.0.0 through 10.0.6.1 |