SV
Product
Security Verify Access
139
CVEs
0
On KEV
10.0
Max CVSS
23
New 30D
Severity mix
Critical 17High 60Medium 56Low 6
Watch
Add Security Verify Access to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-29699 | 6.8 | Jul 15 | IBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary files with a dangerous file type that could be excuted by an user Affected: 10.0.0 |
| CVE-2024-45657 | 6.7 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform unauthorized actions due to incorrect permissions… Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2026-19494 | 6.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-78399 | 6.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-19878 | 6.5 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-11927 | 6.5 | Sep 15 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-4938 | 6.5 | Jul 17 | Incorrect Authorization in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2026-5926 | 6.5 | Apr 22 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2024-35138 | 6.5 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and… Affected: 10.0.0 through 10.0.8 |
| CVE-2022-36775 | 6.5 | Feb 17 | IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, 10.0.3.0, and10.0.4.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers Affected: 10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0; 10.0.4.0 |
| CVE-2022-22463 | 6.5 | Jul 8 | IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to SQL injection Affected: 10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0 |
| CVE-2022-22311 | 6.5 | Mar 31 | IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain sensitive information or possibly change some information due to improper validiation… Affected: 10.0.0; 10.0.1; 10.0.2; 10.0.3 |
| CVE-2021-20537 | 6.5 | Jul 15 | IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound… Affected: 10.0.0 |
| CVE-2026-17189 | 6.1 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-13276 | 6.1 | Sep 14 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-7364 | 6.1 | Jul 17 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2024-40700 | 6.1 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2019-4552 | 6.1 | Oct 15 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attacks Affected: 10.0.0 before 10.0.0.1 |
| CVE-2024-31883 | 5.9 | Jun 27 | IBM Security Verify Access 10.0.0.0 through 10.0.7.1, under certain configurations, could allow an unauthenticated attacker to cause a denial of service due to asymmetric resource… Affected: 10.0.0.0 through 10.0.7.1 |
| CVE-2023-30430 | 5.5 | Jun 27 | IBM Security Verify Access 10.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from trace logs Affected: 10.0.0.0 through 10.0.7.1 |
| CVE-2024-31874 | 5.5 | Apr 10 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 uses uninitialized variables when deploying that could allow a local user to cause a denial of service Affected: 10.0.0 through 10.0.7 |
| CVE-2024-25027 | 5.5 | Mar 31 | IBM Security Verify Access 10.0.6 could disclose sensitive snapshot information due to missing encryption Affected: 10.0.6 |
| CVE-2023-32329 | 5.5 | Feb 3 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow… Affected: 10.0.0.0 through 10.0.6.1 |
| CVE-2023-38267 | 5.5 | Jan 11 | IBM Security Access Manager Appliance (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could allow a local user to… Affected: 10.0.0.0 before 10.0.0.7 |
| CVE-2023-31001 | 5.5 | Jan 11 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive… Affected: 10.0.0.0 before 10.0.0.7 |
| CVE-2026-16830 | 5.4 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-11936 | 5.4 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-78407 | 5.4 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-13272 | 5.4 | Sep 14 | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0.0 through 10.0.9.2 Interim Fix 001 |
| CVE-2026-4364 | 5.4 | Apr 1 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2024-28772 | 5.4 | Jul 25 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cross-site scripting Affected: 10.0.0 |
| CVE-2023-30433 | 5.4 | Jul 19 | IBM Security Verify Access 10.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 10.0.0 |
| CVE-2022-22370 | 5.4 | Jul 8 | IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site scripting Affected: 10.0.0.0; 10.0.1.0; 10.0.2.0; 10.0.3.0 |
| CVE-2021-38895 | 5.4 | Jan 10 | IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting Affected: 10.0.0; 10.0.1.0; 10.0.2.0 |
| CVE-2026-11939 | 5.3 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-12091 | 5.3 | Oct 8 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.2 |
| CVE-2026-11904 | 5.3 | Jul 30 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2026-8861 | 5.3 | Jul 17 | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2026-1491 | 5.3 | Apr 1 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2026-2862 | 5.3 | Apr 1 | Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access Affected: 10.0 through 10.0.9.1 |
| CVE-2025-0163 | 5.3 | Jun 11 | IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled… Affected: 10.0.0 before 10.0.9 |
| CVE-2024-45658 | 5.3 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed technical error message is… Affected: 10.0.0 through 10.0.8 |
| CVE-2024-45659 | 5.3 | Feb 4 | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed technical error message is… Affected: 10.0.0.0 before 10.0.9.0 |
| CVE-2021-38956 | 5.3 | Jan 10 | IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive version information in HTTP response headers that could aid in further attacks against the system Affected: 10.0.0; 10.0.1.0; 10.0.2.0 |
| CVE-2021-20498 | 5.3 | Jul 15 | IBM Security Verify Access Docker 10.0.0 reveals version information in HTTP requests that could be used in further attacks against the system Affected: 10.0.0 |
| CVE-2021-20585 | 5.3 | Jun 1 | IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in further attacks against the system Affected: 20.07 |
| CVE-2020-4699 | 5.3 | Oct 12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further… Affected: 10.0.0 |
| CVE-2020-4661 | 5.3 | Oct 12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further… Affected: 10.0.0 |
| CVE-2020-4660 | 5.3 | Oct 12 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further… Affected: 10.0.0 |
| CVE-2021-20511 | 4.9 | Jul 15 | IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system Affected: 10.0.0 |