Identity Manager (Ibm) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2023-07-31. Vendor: Ibm.

CVEs of Identity Manager

• CVE-2023-35016 - CVSS 6.5 (medium), 2023-07-31: IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially…
• CVE-2023-35019 - CVSS 8.8 (high), 2023-07-31: IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a…
• CVE-2022-22449 - CVSS 5.3 (medium), 2022-12-24: IBM Security Verify Governance, Identity Manager 10.01 could allow a remote attacker to obtain sensitive information when a detailed technical error message…
• CVE-2022-22458 - CVSS 6.5 (medium), 2022-12-22: IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read by a remote authenticated user. IBM…
• CVE-2022-22457 - CVSS 5.3 (medium), 2022-12-22: IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including user credentials in plain clear text which can be read by a…
• CVE-2022-22456 - CVSS 6.1 (medium), 2022-12-22: IBM Security Verify Governance, Identity Manager 10.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
• CVE-2022-35646 - CVSS 5.9 (medium), 2022-12-22: IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify or cancel any other user's access…
• CVE-2022-22461 - CVSS 7.5 (high), 2022-12-22: IBM Security Verify Governance, Identity Manager 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…