SV
Product
Security Verify Access
139
CVEs
0
On KEV
10.0
Max CVSS
23
New 30D
Severity mix
Critical 17High 60Medium 56Low 6
Watch
Add Security Verify Access to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-109126 | 8.8 | Oct 19 | IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials Affected: 10.0.9.3 |
| CVE-2026-16916 | 8.8 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-18740 | 8.8 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-19482 | 8.8 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-78388 | 8.8 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2024-49803 | 8.8 | Nov 29 | IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted… Affected: 10.0.0 through 10.0.8 |
| CVE-2026-12004 | 8.7 | Aug 12 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2025-36355 | 8.5 | Oct 6 | IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute… Affected: 10.0.0.0 before 10.0.9.0; 10.0.9.0; 10.0.9.0; 10.0.9.0 |
| CVE-2024-35133 | 8.2 | Aug 29 | IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect attack Affected: 10.0.0 through 10.0.8 |
| CVE-2026-12101 | 8.1 | Sep 15 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-12359 | 8.1 | Aug 12 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-13267 | 8.1 | Aug 12 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2024-31872 | 8.1 | Apr 10 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle attack when deploying Open Source scripts due to missing… Affected: 10.0.0 through 10.0.7 |
| CVE-2024-31871 | 8.1 | Apr 10 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle attack when deploying Python scripts due to improper… Affected: 10.0.0 through 10.0.7 |
| CVE-2021-29742 | 8.0 | Jul 15 | IBM Security Verify Access Docker 10.0.0 could allow a user to impersonate another user on the system Affected: 10.0.0 |
| CVE-2026-1342 | 7.9 | Apr 7 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2026-1346 | 7.8 | Apr 8 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2025-0161 | 7.8 | Feb 20 | IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation Affected: 10.0.0 through 10.0.0.9; 11.0.0 |
| CVE-2024-49814 | 7.8 | Feb 6 | IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated user to increase their privileges due to execution with unnecessary privileges Affected: 10.0.0 through 10.0.3 |
| CVE-2024-49804 | 7.8 | Nov 29 | IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a locally authenticated non-administrative user to escalate their privileges due to unnecessary… Affected: 10.0.0 through 10.0.8 |
| CVE-2023-31005 | 7.8 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2023-31003 | 7.8 | Jan 11 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could allow a local user to… Affected: 10.0.0.0 before 10.0.0.7 |
| CVE-2022-22465 | 7.8 | Jul 8 | IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 could allow a local user to obtain elevated privileges due to improper access permissions Affected: 10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0 |
| CVE-2021-29665 | 7.8 | Jun 1 | IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on… Affected: 20.07 |
| CVE-2026-11888 | 7.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-11930 | 7.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-16823 | 7.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-19491 | 7.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-19498 | 7.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-19493 | 7.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-11926 | 7.5 | Sep 15 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-11929 | 7.5 | Sep 15 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-12358 | 7.5 | Sep 15 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-13260 | 7.5 | Sep 14 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-13297 | 7.5 | Sep 4 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-11932 | 7.5 | Aug 12 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2024-43187 | 7.5 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed… Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2022-32759 | 7.5 | Jul 25 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthorized user to obtain… Affected: 10.0.0 |
| CVE-2024-31873 | 7.5 | Apr 10 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 contains hard-coded credentials which it uses for its own inbound authentication that could be obtained by a malicious… Affected: 10.0.0 through 10.0.7 |
| CVE-2023-31006 | 7.5 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2023-30999 | 7.5 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2023-25927 | 7.5 | May 12 | IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting… Affected: 10.0.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5 |
| CVE-2022-22464 | 7.5 | Jul 8 | IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly… Affected: 10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0 |
| CVE-2021-38957 | 7.5 | Jan 10 | IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation Affected: 10.0.0; 10.0.1.0; 10.0.2.0 |
| CVE-2021-38921 | 7.5 | Jan 10 | IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 10.0.0; 10.0.1.0; 10.0.2.0 |
| CVE-2021-20497 | 7.5 | Jul 15 | IBM Security Verify Access Docker 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 10.0.0 |
| CVE-2021-20439 | 7.5 | Jul 15 | IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user Affected: 10.0.0 |
| CVE-2021-20576 | 7.5 | Jun 1 | IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the application to crash Affected: 20.07 |
| CVE-2026-11923 | 7.4 | Aug 12 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-1345 | 7.3 | Apr 1 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |