SV
Product
Security Verify Access
139
CVEs
0
On KEV
10.0
Max CVSS
23
New 30D
Severity mix
Critical 17High 60Medium 56Low 6
Watch
Add Security Verify Access to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-28787 | 10.0 | Apr 4 | IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote attacker to obtain highly sensitive private information or… Affected: 10.0.0 through 10.0.7 |
| CVE-2026-78401 | 9.8 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-78406 | 9.8 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-11928 | 9.8 | Sep 15 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-17616 | 9.8 | Aug 12 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-4101 | 9.8 | Apr 1 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2025-36087 | 9.8 | Oct 13 | IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9, and 11.0.0, under certain configurations, contains hard-coded… Affected: 10.0.0 through 10.0.9 |
| CVE-2024-45647 | 9.8 | Jan 20 | IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an… Affected: 10.0.0 through 10.0.8 |
| CVE-2024-49806 | 9.8 | Nov 29 | IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound… Affected: 10.0.0 through 10.0.8 |
| CVE-2024-49805 | 9.8 | Nov 29 | IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound… Affected: 10.0.0 through 10.0.8 |
| CVE-2023-32330 | 9.8 | Feb 7 | IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure calls that could allow an attacker on the network to take control of the server Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2023-32328 | 9.8 | Feb 7 | IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some instances that could allow an attacker on the network to take control of the server Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2021-39070 | 9.8 | Feb 2 | IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an attacker to authenticate as any user on… Affected: 10.0.0; 10.0.1.0; 10.0.2.0 |
| CVE-2020-4499 | 9.8 | Oct 15 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authentication checks and gain… Affected: 10.0.0 before 10.0.0.1 |
| CVE-2025-36356 | 9.3 | Oct 6 | IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their… Affected: 10.0.0.0 before 10.0.9.0; 10.0.9.0; 10.0.9.0; 10.0.9.0 |
| CVE-2026-11921 | 9.1 | Sep 15 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2023-31004 | 9.0 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow… Affected: 10.0.0.0 through 10.0.6.1 |
Showing 17