SV
Product
Security Verify Access
139
CVEs
0
On KEV
10.0
Max CVSS
23
New 30D
Severity mix
Critical 17High 60Medium 56Low 6
Watch
Add Security Verify Access to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38267 | 5.5 | Jan 11 | IBM Security Access Manager Appliance (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could allow a local user to… Affected: 10.0.0.0 before 10.0.0.7 |
| CVE-2023-31001 | 5.5 | Jan 11 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive… Affected: 10.0.0.0 before 10.0.0.7 |
| CVE-2026-16830 | 5.4 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-11936 | 5.4 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-78407 | 5.4 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-13272 | 5.4 | Sep 14 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-4364 | 5.4 | Apr 1 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2024-28772 | 5.4 | Jul 25 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting Affected: 10.0.0 |
| CVE-2023-30433 | 5.4 | Jul 19 | IBM Security Verify Access 10.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 10.0.0 |
| CVE-2022-22370 | 5.4 | Jul 8 | IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site scripting Affected: 10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0 |
| CVE-2021-38895 | 5.4 | Jan 10 | IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting Affected: 10.0.0; 10.0.1.0; 10.0.2.0 |
| CVE-2026-11939 | 5.3 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-12091 | 5.3 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-11904 | 5.3 | Jul 30 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2026-8861 | 5.3 | Jul 17 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2026-1491 | 5.3 | Apr 1 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2026-2862 | 5.3 | Apr 1 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2025-0163 | 5.3 | Jun 11 | IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled… Affected: 10.0.0 before 10.0.9 |
| CVE-2024-45658 | 5.3 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed technical error message is… Affected: 10.0.0 through 10.0.8 |
| CVE-2024-45659 | 5.3 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed technical error message is… Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2021-38956 | 5.3 | Jan 10 | IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive version information in HTTP response headers that could aid in further attacks against the system Affected: 10.0.0; 10.0.1.0; 10.0.2.0 |
| CVE-2021-20498 | 5.3 | Jul 15 | IBM Security Verify Access Docker 10.0.0 reveals version information in HTTP requests that could be used in further attacks against the system Affected: 10.0.0 |
| CVE-2021-20585 | 5.3 | Jun 1 | IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in further attacks against the system Affected: 20.07 |
| CVE-2020-4699 | 5.3 | Oct 12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further… Affected: 10.0.0 |
| CVE-2020-4661 | 5.3 | Oct 12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further… Affected: 10.0.0 |
| CVE-2020-4660 | 5.3 | Oct 12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further… Affected: 10.0.0 |
| CVE-2021-20511 | 4.9 | Jul 15 | IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system Affected: 10.0.0 |
| CVE-2021-20496 | 4.9 | Jul 15 | IBM Security Verify Access Docker 10.0.0 could allow an authenticated user to bypass input due to improper input validation Affected: 10.0.0 |
| CVE-2021-20524 | 4.8 | Jul 15 | IBM Security Verify Access Docker 10.0.0 is vulnerable to cross-site scripting Affected: 10.0.0 |
| CVE-2026-13277 | 4.7 | Sep 14 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-2475 | 4.7 | Apr 1 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2021-20510 | 4.4 | Jul 15 | IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by a local user Affected: 10.0.0 |
| CVE-2021-20500 | 4.4 | Jul 15 | IBM Security Verify Access Docker 10.0.0 could reveal highly sensitive information to a local privileged user Affected: 10.0.0 |
| CVE-2021-20534 | 3.5 | Jul 15 | IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 10.0.0 |
| CVE-2021-20575 | 3.3 | Jun 1 | IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system Affected: 20.07 |
| CVE-2026-11937 | 3.1 | Aug 12 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2021-38894 | 2.7 | Jan 10 | IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 10.0.0; 10.0.1.0; 10.0.2.0 |
| CVE-2021-20523 | 2.7 | Jul 15 | IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 10.0.0 |
| CVE-2021-20499 | 2.7 | Jul 15 | IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 10.0.0 |