Ibm

Verify Identity Access

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-36087

  • EPSS 0.04%
  • Veröffentlicht 13.10.2025 00:38:14
  • Zuletzt bearbeitet 20.10.2025 20:23:01

IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9, and 11.0.0, under certain configurations, contains hard-coded credentials, such as a password or cryptographic key, which it uses fo...

6.1

CVE-2024-40700

  • EPSS 0.31%
  • Veröffentlicht 04.02.2025 21:15:26
  • Zuletzt bearbeitet 05.08.2025 13:54:50

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended function...

7.5

CVE-2024-43187

  • EPSS 0.06%
  • Veröffentlicht 04.02.2025 21:15:26
  • Zuletzt bearbeitet 05.08.2025 14:07:24

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

6.7

CVE-2024-45657

  • EPSS 0.01%
  • Veröffentlicht 04.02.2025 21:15:26
  • Zuletzt bearbeitet 05.08.2025 14:10:01

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment.

5.3

CVE-2024-45659

  • EPSS 0.08%
  • Veröffentlicht 04.02.2025 18:15:34
  • Zuletzt bearbeitet 05.08.2025 13:51:02

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the ...