Ibm

Security Verify Access

81 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.3

CVE-2025-36354

Media report
  • EPSS 0.05%
  • Published 06.10.2025 16:53:43
  • Last modified 06.10.2025 17:16:05

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute arbitrary commands with lower user privileges on the system due to improper va...

8.5

CVE-2025-36355

Media report
  • EPSS 0.01%
  • Published 06.10.2025 16:52:30
  • Last modified 06.10.2025 17:16:05

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere.

9.3

CVE-2025-36356

Media report
  • EPSS 0.02%
  • Published 06.10.2025 16:50:48
  • Last modified 06.10.2025 17:16:05

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required...

5.3

CVE-2025-0163

  • EPSS 0.05%
  • Published 11.06.2025 14:20:28
  • Last modified 13.08.2025 14:31:41

IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled accounts.

6.5

CVE-2024-56343

  • EPSS 0.08%
  • Published 06.06.2025 01:28:38
  • Last modified 20.08.2025 17:36:56

IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request.

5.3

CVE-2024-56342

  • EPSS 0.06%
  • Published 06.06.2025 01:27:08
  • Last modified 20.08.2025 17:38:33

IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the syst...

7.8

CVE-2025-0161

  • EPSS 0.01%
  • Published 20.02.2025 16:15:36
  • Last modified 08.08.2025 19:42:26

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation.

7.8

CVE-2024-49814

  • EPSS 0.01%
  • Published 06.02.2025 01:15:08
  • Last modified 08.08.2025 17:02:50

IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated user to increase their privileges due to execution with unnecessary privileges.

6.7

CVE-2024-45657

  • EPSS 0.01%
  • Published 04.02.2025 21:15:26
  • Last modified 05.08.2025 14:10:01

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment.

6.5

CVE-2024-35138

  • EPSS 0.01%
  • Published 04.02.2025 21:15:26
  • Last modified 18.06.2025 15:32:51

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.